Splunk Search

How to set Default Time Range for View in viewstates.conf

tkadale
Path Finder

I have Screen 1 for which I have set default time range in viewstates.conf for a user as follows:

[Screen_1:_current]

TimeRangePicker_0_0_0.default = Last 7 days

When Screen Loads for first time, it shows default time range as Last 7 Days.

then I change the time range to "All Time" and see the graphs.

After this I refresh the application. When I again select this Screen, default is shown "All Time".

I have used isSticky=false in the XML of the Screen.

When I checked viewstates.conf the default automatically changes to "All Time" from "Last 7 Days".

Can anybody help.

Thanks in advance!

Tags (1)
0 Karma

hazekamp
Builder

tkadale,

Have you tried '_current' in viewstates.conf?

## viewstates.conf
<viewstate_id> = '_current' is a reserved name for normal view 'sticky state'
0 Karma

tkadale
Path Finder

Thanks for the reply!

Sorry I didnt get what you want to say.I have configured in viewstates.conf as mentioned above.

Please provide more details if possible

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Level Up Your .conf25: Splunk Arcade Comes to Boston

With .conf25 right around the corner in Boston, there’s a lot to look forward to — inspiring keynotes, ...

Manual Instrumentation with Splunk Observability Cloud: How to Instrument Frontend ...

Although it might seem daunting, as we’ve seen in this series, manual instrumentation can be straightforward ...

Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform

Ready to make your IT operations smarter and more efficient? Discover how to automate Splunk alerts with Red ...