Dashboards & Visualizations

Time Picker Doesn't Always Work in Dashboard

genesiusj
Builder

Hello,
I have a time picker in my dashboard. It works only some of the time.

If I select a preset like Today or Last 24 hours, it works.
earliest=@d AND latest=now
earliest=-24h@h AND latest=now

If I select Since from the Date Range or Date & Time Range, it fails. My other drop downs display "Could not create search." beneath them.
earliest=1569902400 AND latest=
earliest=1569952800 AND latest=

I don't understand why the latest is not being populated with now().

For Date Range or Date & Time Range if I select Between for either of them it works. However, if I chose Before, this fails as well.
earliest= AND latest=1569902400

I don't understand why the earliest is not being populated with "some time".

Thanks and God bless,
Genesius

0 Karma
1 Solution

genesiusj
Builder

I found the problem.

I am using the tokens in 7 different sub-searches with this dashboard panel.
Removing these tokens from the sub-searches and just adding

<earliest>$Selected_Time_Range.earliest$</earliest>
<latest>$Selected_Time_Range.latest$</latest>

after the close query tag caused it to work.

Thanks and God bless,
Genesius

View solution in original post

0 Karma

genesiusj
Builder

I found the problem.

I am using the tokens in 7 different sub-searches with this dashboard panel.
Removing these tokens from the sub-searches and just adding

<earliest>$Selected_Time_Range.earliest$</earliest>
<latest>$Selected_Time_Range.latest$</latest>

after the close query tag caused it to work.

Thanks and God bless,
Genesius

0 Karma
Get Updates on the Splunk Community!

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to Officially Supported Splunk ...