Splunk Search

Setting Custom/Default Time in Splunk Search/Dashboard

eraasch
New Member

As the title suggests I am attempting to set a custom and default for a splunk dashboard that I created. When it opens I need it to snap to the previous weekday between 16:26 and 16:42 CST. Does anyone know how I would go about doing this?

Labels (1)
0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

Use default earliest=-w@w+1d and default latest=@w5+1d

(Use advanced section if you are selecting from timerange picker UI.)

VatsalJagani_0-1640507460750.png

Then use this filter in the SPL search query

where date_hour=16 AND date_minute>=26 AND date_minute<=42
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...