Reporting

How to change time range from scheduled report in dashboard panel?

DEAD_BEEF
Builder

I have 4 panels on a dashboard. These panels are populated via scheduled reports. They each have their own timerange that they cover. Is it possible to add a time input on the dashboard and let users change this such that the panels re-run with the newly selected time range? That is, I want to keep the default time range of the scheduled report, but allow users to select a new time range and then the panels within the dashboard rerun and present results based on the newly selected time range. I tried messing around with it and don't see how I can override the report's time range by putting a new Time input in that panel.

0 Karma

sdchakraborty
Contributor

Hi,

I tried to solve this few months back. I posted the code and data used in the below github repo. Please try to implement the same in your environement and see how its going.

https://github.com/siddharthajuprod07/youtube/tree/master/local_vs_global_timepicker

first index the csv file and then create the dashboard.

Sid

0 Karma

whrg
Motivator

Hi! Does your scheduled search produce a time field of some sort or does it keep the _time field? If so, I can show you how to do a time filter in a dashboard panel.

0 Karma

DEAD_BEEF
Builder

It does not produce a time field. It just produces various stats panels within the dashboard. When you say "keep the _time field" I can say that none of the panels change or alter _time.

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...