Dashboards & Visualizations

How to use the time bar in a dashboard

almanacht
Explorer

I want to use the time menu but in my chain of type I code Something like that ( | dbquery "MUSTER_BACKUP" "SELECT * FROM backup_db_jobs" | eval submission_times=strftime(submission_time,"%b-%d") | chart count AS "Nbr de jobs" over submission_times BY submitter | rename"submission_times" as "Date") but the strftime just force my Dashboard to take this time and I don't know how to change him to have my menu who fixe the time of search of my data

0 Karma
Get Updates on the Splunk Community!

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to Officially Supported Splunk ...