Splunk Search

How to set Default Time Range for View in viewstates.conf

tkadale
Path Finder

I have Screen 1 for which I have set default time range in viewstates.conf for a user as follows:

[Screen_1:_current]

TimeRangePicker_0_0_0.default = Last 7 days

When Screen Loads for first time, it shows default time range as Last 7 Days.

then I change the time range to "All Time" and see the graphs.

After this I refresh the application. When I again select this Screen, default is shown "All Time".

I have used isSticky=false in the XML of the Screen.

When I checked viewstates.conf the default automatically changes to "All Time" from "Last 7 Days".

Can anybody help.

Thanks in advance!

Tags (1)
0 Karma

hazekamp
Builder

tkadale,

Have you tried '_current' in viewstates.conf?

## viewstates.conf
<viewstate_id> = '_current' is a reserved name for normal view 'sticky state'
0 Karma

tkadale
Path Finder

Thanks for the reply!

Sorry I didnt get what you want to say.I have configured in viewstates.conf as mentioned above.

Please provide more details if possible

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...