Splunk Search

Classic Dashboard query - 3 visuals with 3 different times

PaulaCom
Path Finder

Hi all 

I have a dashboard that i need to build to show number of Helpdesk calls for :

1) year to date

2) Average monthly

3) Average daily 

i have the query set up and  I've selected 'year to date' 

I've done a | stats count and saved to Dashboard 

When i save this onto the dashboard the time has defaulted to last 24 hours. I've gone into the source editor and removed queryparameters but this hasn't helped

i think i need to set the time on my query (at the top) - year to date

Can some help me with this code ? 

 

Many thanks

 

P

 

Tags (1)
0 Karma
1 Solution

venky1544
Builder

Hi @PaulaCom 

when you edit the dashboard and in the panel if you click the magnifying lens you should get below option where you can set the time range 

venky1544_0-1689076271864.png

is it Something you have done it or did i understood your question wrong

 

View solution in original post

venky1544
Builder

Hi @PaulaCom 

when you edit the dashboard and in the panel if you click the magnifying lens you should get below option where you can set the time range 

venky1544_0-1689076271864.png

is it Something you have done it or did i understood your question wrong

 

PaulaCom
Path Finder

thank you 

i think i was making it more complicated than it needed to be 

worked perfectly 

 

P 🙂 

0 Karma

PaulaCom
Path Finder

so I've change the earliest to 

"earliest""-6month@month",
                    "latest""now"
i think this is it right? 
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...