Hi @mxh7777,
you can add an input to set a token for the span,
something like this:
<input type="dropdown" token="span">
<label>Span</label>
<choice value="1d">1 Day</choice>
<choice value="1w">1 Week</choice>
<choice value="1mon">1 Month</choice>
<default>1d</default>
</input>
and adding to the search
| timechart span=$span$ count
Ciao.
Giuseppe
| streamstats range(_time) as _span window=2
| eventstats max(_span) as _span
Hi @mxh7777,
you can add an input to set a token for the span,
something like this:
<input type="dropdown" token="span">
<label>Span</label>
<choice value="1d">1 Day</choice>
<choice value="1w">1 Week</choice>
<choice value="1mon">1 Month</choice>
<default>1d</default>
</input>
and adding to the search
| timechart span=$span$ count
Ciao.
Giuseppe
Thanks @gcusello
It works perfectly
Hi @mxh7777,
good for you, see next time!
Ciao and happy splunking
Giuseppe
P.S.: Karma Points are appreciated ;-