Hi Everyone,
I have one requirement.
I have multiple dashboards in which data is not coming.
I have set the default time range as last 7 days.
But the data is not there.
so for one dashboard the data is there till 21st Feb
For 2nd dashboard the data is there till 25th Feb.
Is there any way in splunk that the dashboard should show the data from the dates available.
Like if the data is there till 25th Feb then it should show the data from Since25th Feb till now
If the data is available till 1st March it should show the data Since 1st March till now
My data range drop-dwon code:
<input type="time" token="field1" searchWhenChanged="true">
<label>Date/Time</label>
<default>
<earliest>-7d@h</earliest>
<latest>now</latest>
</default>
</input>
Can someone guide me on this.
Thanks in advance
What is your search? Is this metric data or events? you have things like
| mstats latest(metric.name) AS LastValue WHERE index=your_metrics AND host=deepThought
That will give the latest of all the values it finds
I have multiple dashboards . And there are events.
I have one date/time dropdown for all dashboards.
For some dashboards the data is there only till 21st feb
For other dashboards the data is there only till 25th Feb.
Is there any way to dynamically display the data from the last date available.