Splunk Search

how to use timerangepicker's earliest

lihongyan_84
Explorer

I want to only use timerangepicker'e earliest or latest. for example i set my search earliest is @mon and my search latest is timerangepicker's latest; Or i want to display the same day of last month comparing to timerangepticker

Tags (3)
0 Karma

woodcock
Esteemed Legend

Like this:

<form>
  <label>Using half of timepicker</label>
  <description>Using half of timepicker</description>
  <fieldset autoRun="true" submitButton="false">
    <input type="time" token="time_tok1" searchWhenChanged="true">
      <label>Chart Timespan/Width</label>
      <default>Last 24 hours</default>
    </input>
  </fieldset>
  <row>
      <chart>
        <title>Using earliest only</title>
        <searchString>earliest=$time_tok1.earliest$ latest=now() Your Search Here</searchString>
      </chart>
  </row>
  <row>
      <chart>
        <title>Using latest only</title>
        <searchString>earliest=0 latest=$time_tok1.latest$ Your Search Here</searchString>
      </chart>
  </row>
</form>
0 Karma

Ayn
Legend

Uhh...could you clarify what you want to do a bit more please?

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...