Hello, I changed the code to below to show "From and To" in the sample report below 1) Is there a way to change "From" and "To" as Bold font, and leave the rest as regular font 2) Is it possible to just put the time token ($time.earliest) literally next to From in the dashboard? 3) Does addinfo obtain the data from makeresult, so I don't need to use index and have multiple rows of info_min_time? Thank you for your help | makeresults
| fields - _time
| addinfo
| rename info_min_time as earliest
| rename info_max_time as latest
| fieldformat earliest="From: " . strftime(earliest,"%b %d %Y %H:%M:%S")
| fieldformat latest="To: ". strftime(latest,"%b %d %Y %H:%M:%S")
| table earliest latest {
"visualizations": {
"viz_1putkd4H": {
"type": "splunk.table",
"options": {
"headerVisibility": "none",
"backgroundColor": "transparent",
"tableFormat": {
"rowBackgroundColors": "> table | seriesByIndex(0) | pick(tableAltRowBackgroundColorsByBackgroundColor)",
"headerBackgroundColor": "> backgroundColor | setColorChannel(tableHeaderBackgroundColorConfig)",
"rowColors": "> rowBackgroundColors | maxContrast(tableRowColorMaxContrast)",
"headerColor": "> headerBackgroundColor | maxContrast(tableRowColorMaxContrast)"
}
},
"dataSources": {
"primary": "ds_P8DuhImO"
}
},
"viz_JKbWkEG0": {
"type": "splunk.markdown",
"options": {
"markdown": ""
}
},
"viz_c9htuqvf": {
"type": "splunk.markdown",
"options": {
"markdown": "# Sample Report"
}
},
"viz_lxib04FT": {
"type": "splunk.rectangle"
},
"viz_Ba02NPRN": {
"type": "splunk.rectangle",
"options": {
"fillColor": "#ffffff"
}
}
},
"dataSources": {
"ds_P8DuhImO": {
"type": "ds.search",
"options": {
"query": "| makeresults\n| fields - _time\n| addinfo\n| rename info_min_time as earliest\n| rename info_max_time as latest\n| fieldformat earliest=\"From: \" . strftime(earliest,\"%b %d %Y %H:%M:%S\")\n| fieldformat latest=\"To: \". strftime(latest,\"%b %d %Y %H:%M:%S\")\n| table earliest latest"
},
"name": "time_selected"
}
},
"defaults": {
"dataSources": {
"ds.search": {
"options": {
"queryParameters": {
"latest": "$global_time.latest$",
"earliest": "$global_time.earliest$"
}
}
}
}
},
"inputs": {
"input_global_trp": {
"type": "input.timerange",
"options": {
"token": "global_time",
"defaultValue": "-24h@h,now"
},
"title": "Global Time Range"
}
},
"layout": {
"type": "absolute",
"options": {
"display": "auto-scale",
"height": 1200
},
"structure": [
{
"item": "viz_JKbWkEG0",
"type": "block",
"position": {
"x": 170,
"y": 110,
"w": 300,
"h": 300
}
},
{
"item": "viz_lxib04FT",
"type": "block",
"position": {
"x": 10,
"y": 0,
"w": 1190,
"h": 70
}
},
{
"item": "viz_c9htuqvf",
"type": "block",
"position": {
"x": 520,
"y": 20,
"w": 290,
"h": 50
}
},
{
"item": "viz_Ba02NPRN",
"type": "block",
"position": {
"x": 10,
"y": 70,
"w": 1190,
"h": 40
}
},
{
"item": "viz_1putkd4H",
"type": "block",
"position": {
"x": 320,
"y": 70,
"w": 620,
"h": 60
}
}
],
"globalInputs": [
"input_global_trp"
]
},
"description": "",
"title": "studio times"
}
... View more