Splunk Search

How to set default time range for view

tkadale
Path Finder

I want to set the default time range to last 7 days whenever View gets loaded. If I change it manually to All time and revisit the view again, it should show the default time range set for it and not the one I selected manually. Is there any way to achieve it??

Tags (1)
0 Karma

tkadale
Path Finder

I have tried it but it didn't work.

0 Karma

imrago
Contributor
0 Karma

imrago
Contributor
<module name="TimeRangePicker"> 
<param name="default">Year to date</param> 

from the documentation of the TimeRangePicker module:

default

When this is set to one of the time range labels in times.conf, the system sets that time range option when the page loads.

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...