Dashboards & Visualizations

Why does my dashboard time picker default to use only the earliest time in my token's date time range?

alfaconsult
New Member

I have added a time picker to my dashboard with the following default range configured:

   <fieldset submitButton="false" autoRun="false">
        <input type="time" token="Trial 15" searchWhenChanged="true">
          <label>Start thru end of first entity load:</label>
          <default>
            <earliest>1555779600</earliest>
            <latest>1555870800</latest>
          </default>
        </input>
      </fieldset>

But each time the dashoard loads, only the earliest time is used:
alt text
The time range is stored, but the only way to load the data with it is to manually select advanced mode and click apply there:
alt text

How do I fix this so that the entire range is used by default?

0 Karma
1 Solution

KailA
Contributor

Hi alfaconsult,

In token, put a variable name without space, for example:

<fieldset submitButton="false" autoRun="false">
         <input type="time" token="time_token" searchWhenChanged="true">
           <label>Start thru end of first entity load:</label>
           <default>
             <earliest>1555779600</earliest>
             <latest>1555870800</latest>
           </default>
         </input>
</fieldset>

Let me know !

View solution in original post

KailA
Contributor

Hi alfaconsult,

In token, put a variable name without space, for example:

<fieldset submitButton="false" autoRun="false">
         <input type="time" token="time_token" searchWhenChanged="true">
           <label>Start thru end of first entity load:</label>
           <default>
             <earliest>1555779600</earliest>
             <latest>1555870800</latest>
           </default>
         </input>
</fieldset>

Let me know !

alfaconsult
New Member

Thanks, that was it!

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi alfaconsult,
just some quick questions to better understand:

  • if you click on the "Since" button and choose "Between", do you see both your dates?
  • the results you have are all in the requested period or outside it?

Bye.
Giuseppe

0 Karma

alfaconsult
New Member

No, if I click "Between" it defaults to the date of my earliest time to the current date.

The results I am looking for are in the requested period. Instead of using the end date that I set, Splunk uses the current date/time.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...