I have 5 searches that are charted out and added to a Dashboard named ABC.
All the 5 searches the time i search back to is -20m to now.
Is there a way to update all the searches in the dashboard with something like say -120m to now if i decide that is what is relevant? Is that possible without having to add new charts with the new time values to the dashboard?
I should warn that i am new to splunk and maybe missing something obvious.
You can modify your Dashboard by selecting the dashboard and clicking Actions-->Edit dashboard.... Edit the panels you want to change, and if the panel is using an in-line search, you can change the time range right there.
If a panel makes reference to a saved search, you will need to locate the specified search in Manager-->Searches and Reports to change the time range.
NOTE: If you don't see the saved search you're looking for in Manager-->Searches and Reports, be sure to double-check the App Context drop-down on the top-left of the page -- try setting it to All.