Dashboards & Visualizations

How to use the time bar in a dashboard

almanacht
Explorer

I want to use the time menu but in my chain of type I code Something like that ( | dbquery "MUSTER_BACKUP" "SELECT * FROM backup_db_jobs" | eval submission_times=strftime(submission_time,"%b-%d") | chart count AS "Nbr de jobs" over submission_times BY submitter | rename"submission_times" as "Date") but the strftime just force my Dashboard to take this time and I don't know how to change him to have my menu who fixe the time of search of my data

0 Karma
Get Updates on the Splunk Community!

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

Getting Started with AIOps: Event Correlation Basics and Alert Storm Detection in ...

Getting Started with AIOps:Event Correlation Basics and Alert Storm Detection in Splunk IT Service ...

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...