Splunk Dev

How do I hide specific selections from the Presets accordion in Timepicker?

damonmanni
Path Finder

I want to display a modified Time Picker that shows ONLY the following preset choices:
Last 24 hours
Last 3 days
Last 7 days

  • I am running v6.4.1
  • My test process is:
  1. vi /opt/splunk/etc/apps/search/appserver/static/dashboard.css
  2. add css code (shown below)
  3. http://mysvr:8000/en_US/_bump (Bump it to reload)
  4. Goto browser and refresh the Dashboard to render new changes
  5. Check Timepicker widget to see results

I have most of what I want working except it still shows all selections in that column:
Last 15 minutes
Last 60 minutes
Last 4 hours
Last 24 hours
Last 7 days
Last 30 days

What code do i need to remove:
Last 15 minutes
Last 60 minutes
Last 4 hours
Last 30 days

And to add:
Last 3 days

Here is what I have so far:
1) vi /opt/splunk/etc/apps/search/appserver/static/dashboard.css
`
.SingleValueHolder {

background-image: none;

-moz-box-shadow: none;

}

SingleValue_0_1_0 .SingleValueHolder {

background: none;                                                       
text-align: left;                                                       
font-weight: normal;                                                    
width: auto;                                                            
padding-top: 0;                                                         
padding-left: 0;                                                        
font-size: 14px;                                                        
-moz-box-shadow: none;                                                  

}

/* Hide Majority of accordions */

div[id^='relative_view'],

div[id^='daterange_view'],

div[id^='dateandtimerange_view'],

div[id^='advanced_view'],

div[id^='realtime_view'] {

display: none;

}

/* Within the Presets accordian*/

/* Hide Real-time column choices */

div[id^='presets_view'] > div.accordion-body > div > ul:nth-child(1) {

display:none;

}

/* Hide the divider after the Real-time column */

div[id^='presets_view'] > div.accordion-body > div > div:nth-child(2) {

display:none;

}

/* Hide the 1st column choices in the Relative column */

div[id^='presets_view'] > div.accordion-body > div > ul:nth-child(3) {

display:none;

}

/* Keep/Display the 2nd column choices in the Relative column /

/
** div[id^='presets_view'] > div.accordion-body > div > ul:nth-child(4) {
display:none;

}

***/

/* Hide the divider after the Relative column */

div[id^='presets_view'] > div.accordion-body > div > div:nth-child(5) {

display:none;

}

/* Hide Other column choices */

div[id^='presets_view'] > div.accordion-body > div > ul:nth-child(6) {

display:none;

}
`

Tags (1)
0 Karma

HiroshiSatoh
Champion

Is not it easier to make by drop down etc?

    <input type="dropdown" token="Time_Picke">
      <label>Time Picke</label>
      <choice value="-24h@h">Last 24 hours</choice>
      <choice value="-3d@d">Last 3 days</choice>
      <choice value="-7d@d">Last 7 days</choice>
    </input>

 <query>index=XXX earliest=$Time_Picke$ latest=now</query>
0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...