Splunk Search

How to set Default Time Range for View in viewstates.conf

tkadale
Path Finder

I have Screen 1 for which I have set default time range in viewstates.conf for a user as follows:

[Screen_1:_current]

TimeRangePicker_0_0_0.default = Last 7 days

When Screen Loads for first time, it shows default time range as Last 7 Days.

then I change the time range to "All Time" and see the graphs.

After this I refresh the application. When I again select this Screen, default is shown "All Time".

I have used isSticky=false in the XML of the Screen.

When I checked viewstates.conf the default automatically changes to "All Time" from "Last 7 Days".

Can anybody help.

Thanks in advance!

Tags (1)
0 Karma

hazekamp
Builder

tkadale,

Have you tried '_current' in viewstates.conf?

## viewstates.conf
<viewstate_id> = '_current' is a reserved name for normal view 'sticky state'
0 Karma

tkadale
Path Finder

Thanks for the reply!

Sorry I didnt get what you want to say.I have configured in viewstates.conf as mentioned above.

Please provide more details if possible

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...