Knowledge Management

How to restrict kvstore values based on the timepicker on the dashboard

ebythomaspanick
Explorer

Hi,
I have a kvstore with couple of fields. One of the field present is a timestamp field 'StartTime'. I wanted to use the standard time picker in one of my dashboards I would like to display the content of the store based on the time picker.

I came across the following link but it doesn't seem to link the time picker and the field:

answers[dot]splunk[dot]com/answers/209693/index[dot]html

I have tried something like:
StartTime>$form.timePicker.earliest$ AND StartTime<$form.timePicker.latest$ but it wouldn't work.

Any help is much appreciated.

Regards,
Thomas

Labels (1)
0 Karma

masonmorales
Influencer
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...