Splunk Search

Is there a way to set the default time-range for timepicker in form

adityapavan18
Contributor

I am looking for a way to pass results of a query to set the default time range picker to earliest & latest from thre results of the previous query

I mean i have a lookup table which gets generated everyday which outputs two values earliest & latest

Now i have get these values and set the earliest and latest in default time range picker to show data for that timerange on load ....and if required i can change the time in time range picker to look data for any other time.

Tags (1)
0 Karma

royimad
Builder

You can use ValueSetter and ResultsValueSetter to preserve the output from your query and passed the results to the time range picker module.

<module name="SavedSearch">
    <param name="name">SeriesSearch1</param>
    <module name="ResultsValueSetter">
                <param name="fields">series</param>
                    <module name="ValueSetter">
                      <param name="delim">,</param>
                         <param name="name">series</param>
                              <param name="value">$series$</param>
      <module name="TimeRangePicker" layoutPanel="panel_row1_col2">
                <param name="default">$series$</param>  
0 Karma

royimad
Builder

Sideview Utils

0 Karma

royimad
Builder

You need SideView App this make it easy for you

0 Karma

adityapavan18
Contributor

Thanks a lot will try that

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...