I set the default value for TimeRangePicker to 5 minute window and I also mentioned the isSticky to false for my view. For 'admin' user, It always shows selected time as '1 hour window' on page load no matter what I set the default value to. For the users which I created, It works fine.
Is there anything I am am missing.
PS: I created customized times.conf for my app.
The issue here concerns viewstates and the somewhat unintuitive behavior of isSticky=False
This is discussed in detail here:
http://splunk-base.splunk.com/answers/9741/timerangepicker-wont-hold-value-on-dashboard
and the short version is that you would expect that setting isSticky to False would
a) no longer preserve or remember any values going forward.
and
b) ignore all previously stuck values
But unintuitively, it only does "a". So any user that still has a previously stuck value, will get that value set forever.
you can go find a viewstates.conf stanza for the admin user, and manually delete their preserved viewstate for the flashtimeline view.
Again, this answer discusses it more fully:
http://splunk-base.splunk.com/answers/9741/timerangepicker-wont-hold-value-on-dashboard
This was ansered here: http://splunk-base.splunk.com/answers/11306/splunk-ignoring-params-in-dashboard
FYI, this may be helpful: http://splunk-base.splunk.com/answers/1415/how-do-i-set-the-default-time-range-for-the-search-bar-of...