Dashboards & Visualizations

How to use a time field for TimePickerA, but use a different time field for TimePickerB?

Path Finder


I am facing a difficult situation. I have 2 time fields: CreateDateTime and UpdateDateTime.
In the events, UpdateDateTime is used for _time. In some time pickers, I want this time to be used.
However, for some time pickers, I want to bind it to CreateDateTime, but cannot find a way to do it.

Can somebody help?

0 Karma

Path Finder

You can refer to this blog post, I believe it's exactly what you need. Just replace the author's custom time field (claim_filling_date) with yours (CreateDateTime).


0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...