Dashboards & Visualizations

TimeRangePicker to have the default value as Custom time

gpanicker
Explorer

I want to have a TimeRangePicker in a dashboard to have the default value as Custom time .
I dont want the dashboard to display any data , first time the page loads up. Only after user has entered the time ranges by clicking Custom time, the dashboard should get refreshed.
I tried this, In dashboard it shows up as Alltime and it tries to display the data upon loading the page.


Custom time
True

Please help.

Tags (1)
0 Karma

jguarini
Path Finder

to prevent it from searching whent he page loads you will need to change the "searchWhenChanged" to False and add a submit button or someother method of starting the search

something I do is:


False
Last 15 minutes

True
Search
....

Jeremy

0 Karma

Kate_Lawrence-G
Contributor

Hi,

The TimeRangePicker module uses the times.conf file which is (unless customized) under the etc/system/local directory under your search head(s). You can only use values which are defined within that file and custom time isn't an actually defined element.

I believe you can use a workflow action to get around this but I think it would need a start and end field within each event to make it happen with the TimeRangePicker correctly; disclaimer: I've honestly never tried it out.

The way I usually work around this is by using an extended search box to provide an earliest and latest window that I pass onto the search, the only downside is that they will have to type those values in which isn't the most user friendly.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...