Dashboards & Visualizations

TimeRangePicker to have the default value as Custom time

gpanicker
Explorer

I want to have a TimeRangePicker in a dashboard to have the default value as Custom time .
I dont want the dashboard to display any data , first time the page loads up. Only after user has entered the time ranges by clicking Custom time, the dashboard should get refreshed.
I tried this, In dashboard it shows up as Alltime and it tries to display the data upon loading the page.


Custom time
True

Please help.

Tags (1)
0 Karma

jguarini
Path Finder

to prevent it from searching whent he page loads you will need to change the "searchWhenChanged" to False and add a submit button or someother method of starting the search

something I do is:


False
Last 15 minutes

True
Search
....

Jeremy

0 Karma

Kate_Lawrence-G
Contributor

Hi,

The TimeRangePicker module uses the times.conf file which is (unless customized) under the etc/system/local directory under your search head(s). You can only use values which are defined within that file and custom time isn't an actually defined element.

I believe you can use a workflow action to get around this but I think it would need a start and end field within each event to make it happen with the TimeRangePicker correctly; disclaimer: I've honestly never tried it out.

The way I usually work around this is by using an extended search box to provide an earliest and latest window that I pass onto the search, the only downside is that they will have to type those values in which isn't the most user friendly.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...