I got a dashboard with different panels. They are all controlled by a single timepicker.
Usually the timeranges a several weeks. In one of the panels I want an overview for the last 24 hours relative to the latest time.
Time range picked via the picker:
24h Overview should display events for this range:
I tried working with tokens and different method to calculate the new earliest time but didnt get it to work.
I think it will be a simple fix but I jsut cant get it atm.
Thanks in advance.
Try like in that panel with
<row> <panel> <table> <search> <query>index="_internal" |stats count</query> <earliest>-24h@h</earliest> <latest>$time.latest$</latest> </search> <option name="drilldown">none</option> </table> </panel> </row>