How to get the date and time of Time Range Picker Control? <input type="time" searchWhenChanged="true" token="TIMERANGE"> <label>SWIFT Time Range</label> <default> <earliest>@d</earliest> <latest>now</latest> </default> </input> I mean start date and end date in human readable format. It will be great if can get the startepoch and endepoch ... View more

I have below data LOG_DATE MSG_RECV_DATE 20160809 20160809 20160809 20160809 20160809 20160809 20160810 20160809 20160810 20160809 20160810 20160809 The Splunk time range is based on LOG_DATE In the dashboard have the date filter, if select 20160809 it display the count as 3 instead of 6. The graph is plotted for span of 15 min for the selected date. Below is the code snippet. The root cause is it searching based on the selected date in the LOG_DATE and not in the MSG_RECV_DATE because the time range field is mapped to LOG_DATE sourcetype=test | eval PaymentRecvDateTime= MSG_RECV_DATE.MSG_RECV_TIME | eval PaymentRecvDateTimeEpoch= strptime(PaymentRecvDateTime,"%Y%m%d%H%M%S")| bucket PaymentRecvDateTimeEpoch span=15m | stats dc(LOG_REF_ID) as PaymentCount by PaymentRecvDateTimeEpoch | search PaymentRecvDateTimeEpoch&lt;=$ENDDATEEPOCH$ PaymentRecvDateTimeEpoch&gt;=$STARTDATEEPOCH$ | rename PaymentRecvDateTimeEpoch AS _time |timechart span=15m sum(PaymentCount) as count ... View more