I have a time range picker in a dashboard of mine that has a default time of Last 8 hours. If I select the dropdown it shows the Date & Time Range where the user can specify a date/time but the range is not the last 8 hours. It is a 24 hour period starting of 12:00:00 of the previous day and going to 12:00:00 of the current day. Is it possible for the Date & Time range to match the default time that is seen when first navigating to the dashboard (Last 8 hours)?
which version of Splunk? I just tested with a simple dashboard on my free 7.0 license, and the date/time range matches with the default value...and it updates accordingly when I select any other presets/options.
I'm guessing you don't have base configs set in your props.conf which is causing an incorrect timestamp on your events?
Can you confirm the timestamp on your events are incorrect?