Dashboards & Visualizations

Link Time Pickers on Dashboard

mstark31
Path Finder

I have a main time picker on my dashboard with the token value of $field1$.
I also have a secondary time picker on my dashboard that controls a single search panel. Its token value is $field2$.

I want the dashboard to behave such that when I change the value of the main time picker, the secondary time picker will update. However, I want to be able to then change the value of the secondary time picker. For example, if I was looking at a time frame of 8am to 8pm on the main picker, I'd want that to be reflected on the secondary picker. Then, I could adjust the secondary picker to show 10am to 11am. However, if then I wanted to switch the whole dashboard to show 10am to 10pm, I could adjust the main time picker and both would updated.

I tried to use the Advanced section of the secondary time picker to say $field1.earliest$ and $field1.latest$ as the default, but that did not work.
I also added the following code in my XML, but that did not work either.

  <init>
   <set token="field2.earliest">$field1.earliest$</set>
   <set token="field2.latest">$field1.latest$</set>
 </init>

Thanks!

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...