Splunk Search
Highlighted

How to select a time range in a timechart?

Contributor

Hello

Is it possible to use a select time range directly in a timechart?
it means that I would like to use the select time range between tags
i would also like to have the possibility to modify the span value directly in the panel
could you help me pelase

0 Karma
Highlighted

Re: How to select a time range in a timechart?

SplunkTrust
SplunkTrust

Take a look here. There are examples within demonstrating the behaviour I believe you are after

0 Karma
Highlighted

Re: How to select a time range in a timechart?

SplunkTrust
SplunkTrust

Where is the link?

---
If this reply helps you, an upvote would be appreciated.
0 Karma
Highlighted

Re: How to select a time range in a timechart?

SplunkTrust
SplunkTrust

Sorry, for some reason it was taken off my answer. https://docs.splunk.com/Documentation/Splunk/latest/Viz/Chartcontrols

0 Karma
Highlighted

Re: How to select a time range in a timechart?

Super Champion

hi mate,

just double checking my understanding. Do you want the "earliest and latest" to be modified dynamically or . "span" within timechart?

In dashboard, each of them can be put as a token in drop down (or any fields)
=> For earliest and latest, you need to amend at base search level

index=* sourcetype=somesourcetype earliest=$myearliest$ latest=$mylatest$ | timechart ...

=> If you want to amend span, then do the same for $span$

index=* sourcetype=somesourcetype | timechart span=$myspan$ count by something

https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/tokens

0 Karma
Highlighted

Re: How to select a time range in a timechart?

Contributor

HI
Thanks but my exact question is to know if its possible to "play" with earliest=$myearliest$ latest=$mylatest$ or span=$myspan$ directly in the timechart???

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.