Dashboards & Visualizations

How to use a time field for TimePickerA, but use a different time field for TimePickerB?

shivendra_infy
Path Finder

Hi

I am facing a difficult situation. I have 2 time fields: CreateDateTime and UpdateDateTime.
In the events, UpdateDateTime is used for _time. In some time pickers, I want this time to be used.
However, for some time pickers, I want to bind it to CreateDateTime, but cannot find a way to do it.

Can somebody help?

0 Karma

adlireza
Path Finder

You can refer to this blog post, I believe it's exactly what you need. Just replace the author's custom time field (claim_filling_date) with yours (CreateDateTime).

http://blogs.splunk.com/2016/09/16/i-cant-make-my-time-range-picker-pick/

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting V2

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...