How to select a time range in a timechart?

[jip31]

Hello

Is it possible to use a select time range directly in a timechart?
it means that I would like to use the select time range between tags
i would also like to have the possibility to modify the span value directly in the panel
could you help me pelase

[koshyk]

hi mate,

just double checking my understanding. Do you want the "earliest and latest" to be modified dynamically or . "span" within timechart?

In dashboard, each of them can be put as a token in drop down (or any fields)
=> For earliest and latest, you need to amend at base search level

index=* sourcetype=somesourcetype earliest=$myearliest$ latest=$mylatest$ | timechart ...

=> If you want to amend span, then do the same for $span$

index=* sourcetype=somesourcetype | timechart span=$myspan$ count by something

https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/tokens

[jip31]

HI
Thanks but my exact question is to know if its possible to "play" with earliest=$myearliest$ latest=$mylatest$ or span=$myspan$ directly in the timechart???

[twesty]

Take a look here. There are examples within demonstrating the behaviour I believe you are after

[richgalloway]

Where is the link?

[twesty]

Sorry, for some reason it was taken off my answer. https://docs.splunk.com/Documentation/Splunk/latest/Viz/Chartcontrols