How to use 10 different time ranges in Dashboard Studio

[alexis]

Hi everyone,

There are 10 single value graphs on my Dashboard. I don't want to use global time Range. How can I add for each?

[alexis]

Thanks a lot . Stefanie

[Stefanie · Accepted solution]

In Dashboard Studio, you can specify this by directly modifying the Source. 

Once you create your graphs, in the source you can add a stanza for queryParameters and then specify the earliest and latest for your your search.

The earliest and latest are Time Modifiers as specified in https://docs.splunk.com/Documentation/SCS/current/Search/Timemodifiers

and also https://docs.splunk.com/Documentation/SCS/current/Search/Specifyrelativetime 

Here's an example. This is a line graph that pulls the count by index for the past two hours up until now.

"visualizations": {
		"viz_chart_1": {
			"type": "viz.line",
			"options": {
				"drilldown": "none",
				"refresh.display": "progressbar"
			},
			"dataSources": {
				"primary": "ds_search_1"
			}
		},
"dataSources": {
		"ds_search_1": {
			"type": "ds.search",
			"options": {
				"query": "|tstats count by index",
				"queryParameters": {
					"earliest": "-2h@h",
					"latest": "now"
				}
			}
		},