Dashboards & Visualizations

How to use a time field for TimePickerA, but use a different time field for TimePickerB?

shivendra_infy
Path Finder

Hi

I am facing a difficult situation. I have 2 time fields: CreateDateTime and UpdateDateTime.
In the events, UpdateDateTime is used for _time. In some time pickers, I want this time to be used.
However, for some time pickers, I want to bind it to CreateDateTime, but cannot find a way to do it.

Can somebody help?

0 Karma

adlireza
Path Finder

You can refer to this blog post, I believe it's exactly what you need. Just replace the author's custom time field (claim_filling_date) with yours (CreateDateTime).

http://blogs.splunk.com/2016/09/16/i-cant-make-my-time-range-picker-pick/

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...