Dashboards & Visualizations

How to use a time field for TimePickerA, but use a different time field for TimePickerB?

shivendra_infy
Path Finder

Hi

I am facing a difficult situation. I have 2 time fields: CreateDateTime and UpdateDateTime.
In the events, UpdateDateTime is used for _time. In some time pickers, I want this time to be used.
However, for some time pickers, I want to bind it to CreateDateTime, but cannot find a way to do it.

Can somebody help?

0 Karma

adlireza
Path Finder

You can refer to this blog post, I believe it's exactly what you need. Just replace the author's custom time field (claim_filling_date) with yours (CreateDateTime).

http://blogs.splunk.com/2016/09/16/i-cant-make-my-time-range-picker-pick/

0 Karma
Get Updates on the Splunk Community!

Celebrating Fast Lane: 2025 Authorized Learning Partner of the Year

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This ...

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...