I am performing a query to generate a chart. The query time range is the previous 7 days, when I use this time range I get the error message that I attach, but when I lower the time to 5 o...
Hello - I was reading this: https://docs.splunk.com/Documentation/SCS/current/Search/Timemodifiers But it is not very clear to me how to use the timemodifiers properly. i...
I have a Splunk query that returns 3 event types. I'd like the "Start" type events to be set by the time-picker and I'd like the "Stop" and "Portal" events to be driven by the time-picker plus or m...
hi as you can see I use a base search in order to dis play two single pnels, one on the last 24 h and one on the last 7 days so for the second panel I need to put the time range on the l...
...ropdown, time, text) fit into one row.
I have edited my input code in the source of my dashboard as below, and edited styles.css as well.
... ...
/styles.css
resized_input {
width: 500px;
}
B...
I have a saved search and I would like to limit the output to a specific timeframe- but unfortunately I am getting complete results and not the time range alone I want. | savedsearch test earliest=1...
I have a subsearch that I only want to look for the last 15 minutes. All I find are examples of days. Can someone give me examples of minutes, as well as days, months, and so on (for future reference...
I have a dashboard which uses tokens that look like this
earliest=$TIME.earliest$ latest=$TIME.earliest$+60s
If I use the timerange picker and select a relative time, the search works as e...
Hey guys.
I want to find hosts for all time which haven't any messages last 7 days, trying this:
index=main source=syslog | dedup host | table _time host | search latest=-7d
I have a dropdown selection for a Policy field. I want to be able modify the search time based on the policy selected in the dropdown.
The drop down has 3 static options and depending on what i...