Hello everyone, I am using Splunk Studio to create a dashboard with two tabs. Enterprise version 9.4.1. Both tabs are visually identical but in tab 1, I am quering summarized indexes whereas for the second tab, I am running normal queries. 'Normal' queries in this tab can be very intensive if a long time range is selected, therefore, I am trying to limit the time selection to a maximum range of two hours. It could be in any day but the duration between start and end time should not exceed 2 hours. (Not latest 2hours) I've tried editing XML by following some AI suggestions. Most suggestions relied on changing the query itself but this was breaking the query and returning no results in the end. Wondering if someone has already any insights how to do this or could guide me in the right direction? Visually it would look like this:
... View more
