Dashboards & Visualizations

Simple XML, custom timerange dropdown sample?

the_wolverine
Champion

Please provide sample Simple XML for custom timerange dropdown. I do not want to allow users to select whatever timerange they please, like "All Time" Or "Year to Date".

1 Solution

the_wolverine
Champion
   <searchTemplate>index=_internal earliest=$earliest$ | head 10000</searchTemplate>

    <fieldset autoRun="true" submitButton="false">
            <input type="dropdown" token="earliest" searchWhenChanged="true">
              <label>Select a time:</label>
              <choice value="-4h@h">Last 4 hours</choice>
              <choice value="-12h@h">Last 12 hours</choice>
              <choice value="-24h@h">Last 24 hours</choice>
              <default>-4h@h</default>
            </input>
          </fieldset>

View solution in original post

the_wolverine
Champion
   <searchTemplate>index=_internal earliest=$earliest$ | head 10000</searchTemplate>

    <fieldset autoRun="true" submitButton="false">
            <input type="dropdown" token="earliest" searchWhenChanged="true">
              <label>Select a time:</label>
              <choice value="-4h@h">Last 4 hours</choice>
              <choice value="-12h@h">Last 12 hours</choice>
              <choice value="-24h@h">Last 24 hours</choice>
              <default>-4h@h</default>
            </input>
          </fieldset>

anwarmian
Communicator

Great Job!!!!

0 Karma

ben_leung
Builder

Can this be done without modifying the CSS or HTML in the back end? I would also like to have custom time ranges for a dashboard but without using advance XML.

0 Karma

the_wolverine
Champion

yes 🙂 I will post an example in a moment unless someone beats me to it.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...