Hi @kevin_larsson, Here's a dashboard you can use to get started: It has 2 dropdowns: Deployment Date - this just works out the past 7 days and lists them in MMM DD format (the token is in unix epoch format) Range - This is a list of +/- day ranges to spread out your search. The token is a number indicating the days to add or subtract from your date. Behind the scenes when you change one of the dropdowns there is an eval token that calculates the relative time difference between your selected time and the +/- range. <change>
<eval token="earliest">relative_time($deployment_date$,"-" . $form.range$ . "d")</eval>
<eval token="latest">relative_time($deployment_date$,"+" . $form.range$ . "d")</eval>
</change> $deployment_date$ is the value for the Date dropdown, and $form.range$ is the value for the +/- dropdown. It would be easy enough to change the range to minutes, days, months etc. Here's the full code for the dashboard: <form version="1.1" theme="light">
<label>My Dashboard</label>
<fieldset submitButton="false">
<input type="dropdown" token="deployment_date" searchWhenChanged="true">
<label>Deployment Date</label>
<fieldForLabel>label</fieldForLabel>
<fieldForValue>starttime</fieldForValue>
<search>
<query>|gentimes start=-7 | eval label = strftime(starttime,"%b %d")
| reverse</query>
<earliest>-1m@m</earliest>
</search>
<change>
<eval token="earliest">relative_time($deployment_date$,"-" . $form.range$ . "d")</eval>
<eval token="latest">relative_time($deployment_date$,"+" . $form.range$ . "d")</eval>
</change>
<selectFirstChoice>true</selectFirstChoice>
</input>
<input type="dropdown" token="range" searchWhenChanged="true">
<label>Range</label>
<choice value="1">+/- 1 Day</choice>
<choice value="2">+/- 2 Days</choice>
<choice value="3">+/- 3 Days</choice>
<choice value="4">+/- 4 Days</choice>
<choice value="5">+/- 5 Days</choice>
<default>1</default>
<initialValue>1</initialValue>
<change>
<eval token="earliest">relative_time($form.deployment_date$,"-" . $form.range$ ."d")</eval>
<eval token="latest">relative_time($form.deployment_date$,"+" . $form.range$ ."d")</eval>
</change>
</input>
</fieldset>
<row>
<panel>
<table>
<search>
<query>| makeresults
| eval earliest=$earliest|s$, latest=$latest|s$
| eval earliest_readable=strftime(earliest,"%Y-%m-%d"), latest_readable=strftime(latest,"%Y-%m-%d")
| table earliest, earliest_readable, latest, latest_readable</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
</row>
</form> Cheers, Daniel
... View more
