days time picker

[kml_uvce]

I want to make days time picker for my search in a dashboard, so that it shows 1 day, 2 day, 3 day etc instead of last 15 minutes, last 16 minutes, last 4 hours etc, please help me in this.

means I want a drop down of days time picker(last 1 day, last 2 days, last 3 days etc)

-Kamal

[Ayn · Accepted solution]

You should be able to do this by creating a custom times.conf and have your dashboard use that. Have a look at the docs for times.conf: http://docs.splunk.com/Documentation/Splunk/latest/admin/Timesconf

Also this question might be of interest: http://splunk-base.splunk.com/answers/6393/custom-timesconf