@gportnoy Thanks for the Answer. index=_internal earliest="05/26/2019:12:00:00" latest="06/25/2019:12:03:00" | stats count by sourcetype This is working well. I need to do some customization for using the queries in my custom js file. ... View more

@gportnoy Thanks for your answer. ... View more

@DavidHourani Thanks for your answer. It was new knowledge for me. But actually, this is not I want. I would like to clear my question little more deeply. for example, I have a basic query that I have mentioned below. example query: 'index=_internal | stats count by sourcetype' . I want to know how can I apply the startdate and endate for this query (01/05/19 to 04/05/19) in splunk search page. Right now if I write the query in Splunk search page it will run based on the date range which I have given in the Splunk default date picker. Instead of this what is the custom range date i have given in the search bar with a query should give the result. I think now you can clearly understand my requirement. Thanks in Advance ... View more

@jnudell_2 Below I have mention more details about my question. Please go through that. Example query: "index=_internal | stats count by sourcetype" I want to know is there any way to pass 'startdate' and 'enddate' on the above mentioned Splunk query. for example 01/05/2019 (startdate) to 04/05/2019 (enddate) in Splunk search tab page. If that is not possible in this query then please show me how to do that in any other query. I am using a custom js page for calling Splunk queries. I have mentioned a sample below var mySearch = new SearchManager({ id: "mysearch", preview: true, cache: false, search: mvc.tokenSafe('index=_internal | stats count by sourcetype') }); So if you help me how to achieve 'startdate' and 'enddate' in splunk query(manually) I can run that query in js file and check the data is loading or not. Thanks in Advance. ... View more

hi @mstjohn_splunk hi @mstjohn_splunk Thanks! I would like to invite your kind attention for below mentioned things. The reference link which you had given for 'Sparkline formatting and Adding Icon to Table Cells' is not displaying any content. below is the link http://dev.splunk.com/view/webframework-developapps/SP-CAAAEUB. The other reference link for "Simple XML configurations for Sparklines: " this one redirected to another link. Please find the below link: http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML. ... View more