Splunk Search

Dashboard Studio display time range in markdown

Wooly
Explorer

Using Splunk Enterprise 9.4

I have created a data source name TimeRange with the SPL Query:

| makeresults
| addinfo
| eval t1=strftime(info_min_time,"%Y-%m-%d %H:%M")
| eval t2=strftime(info_max_time,"%Y-%m-%d %H:%M")
| table t1, t2

 

I have created a Markdown panel with content 

**Last Updated:** $LastUpdatedBaseSearch:result.friendlyTime$ **[$BaseSearch:job.status$]**

**Time Range:** $TimeRange.t1$ to $TimeRange.t2$

 

For some reason the range is not showing

Wooly_0-1757375953688.png

I did just notice that the Data Source says unused.  So is it not being run when the Dashboard is refreshed?  All my other charts use a chain search with the BaseSearch as their parent.

Wooly_1-1757376125875.png

 

Labels (1)
0 Karma
1 Solution

Wooly
Explorer

Sorry folks, I just figured it out.

Change the Markdown to:

**Last Updated:** $LastUpdatedBaseSearch:result.friendlyTime$ **[$BaseSearch:job.status$]**

**Time Range:** $TimeRange:result.t1$ to $TimeRange:result.t2$

Also I check the checkbox for the TimeRange search to Access search results or metadata

View solution in original post

0 Karma

Wooly
Explorer

Sorry folks, I just figured it out.

Change the Markdown to:

**Last Updated:** $LastUpdatedBaseSearch:result.friendlyTime$ **[$BaseSearch:job.status$]**

**Time Range:** $TimeRange:result.t1$ to $TimeRange:result.t2$

Also I check the checkbox for the TimeRange search to Access search results or metadata

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...