Splunk Search

Classic Dashboard query - 3 visuals with 3 different times

PaulaCom
Path Finder

Hi all 

I have a dashboard that i need to build to show number of Helpdesk calls for :

1) year to date

2) Average monthly

3) Average daily 

i have the query set up and  I've selected 'year to date' 

I've done a | stats count and saved to Dashboard 

When i save this onto the dashboard the time has defaulted to last 24 hours. I've gone into the source editor and removed queryparameters but this hasn't helped

i think i need to set the time on my query (at the top) - year to date

Can some help me with this code ? 

 

Many thanks

 

P

 

Labels (1)
Tags (1)
0 Karma
1 Solution

venky1544
Builder

Hi @PaulaCom 

when you edit the dashboard and in the panel if you click the magnifying lens you should get below option where you can set the time range 

venky1544_0-1689076271864.png

is it Something you have done it or did i understood your question wrong

 

View solution in original post

venky1544
Builder

Hi @PaulaCom 

when you edit the dashboard and in the panel if you click the magnifying lens you should get below option where you can set the time range 

venky1544_0-1689076271864.png

is it Something you have done it or did i understood your question wrong

 

PaulaCom
Path Finder

thank you 

i think i was making it more complicated than it needed to be 

worked perfectly 

 

P 🙂 

0 Karma

PaulaCom
Path Finder

so I've change the earliest to 

"earliest""-6month@month",
                    "latest""now"
i think this is it right? 
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...