Splunk Search

how to use timerangepicker's earliest

lihongyan_84
Explorer

I want to only use timerangepicker'e earliest or latest. for example i set my search earliest is @mon and my search latest is timerangepicker's latest; Or i want to display the same day of last month comparing to timerangepticker

Tags (3)
0 Karma

woodcock
Esteemed Legend

Like this:

<form>
  <label>Using half of timepicker</label>
  <description>Using half of timepicker</description>
  <fieldset autoRun="true" submitButton="false">
    <input type="time" token="time_tok1" searchWhenChanged="true">
      <label>Chart Timespan/Width</label>
      <default>Last 24 hours</default>
    </input>
  </fieldset>
  <row>
      <chart>
        <title>Using earliest only</title>
        <searchString>earliest=$time_tok1.earliest$ latest=now() Your Search Here</searchString>
      </chart>
  </row>
  <row>
      <chart>
        <title>Using latest only</title>
        <searchString>earliest=0 latest=$time_tok1.latest$ Your Search Here</searchString>
      </chart>
  </row>
</form>
0 Karma

Ayn
Legend

Uhh...could you clarify what you want to do a bit more please?

0 Karma
Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

&#x1f5e3; You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...