Splunk Search

how to use timerangepicker's earliest

lihongyan_84
Explorer

I want to only use timerangepicker'e earliest or latest. for example i set my search earliest is @mon and my search latest is timerangepicker's latest; Or i want to display the same day of last month comparing to timerangepticker

Tags (3)
0 Karma

woodcock
Esteemed Legend

Like this:

<form>
  <label>Using half of timepicker</label>
  <description>Using half of timepicker</description>
  <fieldset autoRun="true" submitButton="false">
    <input type="time" token="time_tok1" searchWhenChanged="true">
      <label>Chart Timespan/Width</label>
      <default>Last 24 hours</default>
    </input>
  </fieldset>
  <row>
      <chart>
        <title>Using earliest only</title>
        <searchString>earliest=$time_tok1.earliest$ latest=now() Your Search Here</searchString>
      </chart>
  </row>
  <row>
      <chart>
        <title>Using latest only</title>
        <searchString>earliest=0 latest=$time_tok1.latest$ Your Search Here</searchString>
      </chart>
  </row>
</form>
0 Karma

Ayn
Legend

Uhh...could you clarify what you want to do a bit more please?

0 Karma
Get Updates on the Splunk Community!

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Community Content Calendar, November Edition

Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...