Splunk Search

time range picker in Splunk 6.1.3 build 220630

Norling80
Path Finder

Hi, I´m trying to get the Time range picker to work in a test dashboards and in some cases it does work but not when I choose a manuel time under the Date & Time Range section.

Each element in the dashboard had already the predefined earliest/latest time from the original search that was saved to the dashboard in the first place, I guess they I need to change those.

The dashboard automatically added this when I added the TimePicker from the GUI:

  <label />
  <default>
    <earliestTime>0</earliestTime>
    <latestTime />
  </default>
</input>

any ides what I need to change to make it work?
/magnus

Tags (1)

jdwest1
Explorer

Time range picker is global if token is not defined.
Global time range picker is overridden by specific searches having declared time frames, either in xml or in the search string.
Being that you said all of your searches have those declared and the default is to include a token from the add input, It is an unused variable at the moment.

edit: I have the time range picker working in a global capacity by deleting the token="token" property and deleting any earilestTime and latestTime properties under and in a given search.
edit2: Below is for using the token.

<earliestTime>$local_time_pick.earliest$</earliestTime>
<latestTime>$local_time_pick.latest$</latestTime>

This got it working!

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>