Dashboards & Visualizations

new time calculated by the time received from the dashboard timepicker?

jihoon
New Member

test

<input type="time" token="time_tok" searchWhenChanged="true">
  <label>test</label>
  <default>
    <earliest>03/10/2015:00:00:00</earliest>
    <latest>03/10/2015:24:00:00</latest>
  </default>
</input>



  <table id="detail">
    <title>here --> earliest=$tok.earliest$ ( -calcul ) latest=$tok.latest$ ( -calcul ) </title>   //here
    // From 3 days from the time defalut input method to calculate until yesterday.
    // ex) here --> 03/07/2015:00:00:00 03/09/2015:24:00:00

...

Is it possible in xml?

Tags (2)
0 Karma

woodcock
Esteemed Legend

If you are talking about doing something inside a search string, you can use relative_time like this:

| eval next_time=relative_time($time_tok.latest$,"-3d")

Perhaps your confusion is that your input is using time_tok but your title is using $tok$ (instead of `$time_tok$)?

0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...