Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About Wooly
Wooly
Explorer
Member since:
08-07-2025
09-08-2025
Community Statistics
| Posts | 9 |
| Solutions | 1 |
| Karma Given | 2 |
| Karma Received | 0 |
| Member Since | 08-07-2025 |
Activity Feed
- Posted Re: Dashboard Studio display time range in markdown on Splunk Search. 09-08-2025 05:15 PM
- Posted Dashboard Studio display time range in markdown on Splunk Search. 09-08-2025 05:06 PM
- Posted Re: Dashboard Studio Data source overview on Dashboards & Visualizations. 08-15-2025 05:56 AM
- Karma Re: Dashboard Studio Data source overview for livehybrid. 08-15-2025 05:55 AM
- Posted Dashboard Studio Data source overview on Dashboards & Visualizations. 08-14-2025 07:30 PM
- Karma Re: Markdown Text and Job Metadata format for livehybrid. 08-11-2025 04:25 AM
- Posted Re: Markdown Text and Job Metadata format on Dashboards & Visualizations. 08-07-2025 04:25 PM
- Posted Re: Markdown Text and Job Metadata format on Dashboards & Visualizations. 08-07-2025 02:28 PM
- Posted Markdown Text and Job Metadata format on Dashboards & Visualizations. 08-07-2025 11:58 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
09-08-2025
05:15 PM
Sorry folks, I just figured it out. Change the Markdown to: **Last Updated:** $LastUpdatedBaseSearch:result.friendlyTime$ **[$BaseSearch:job.status$]**
**Time Range:** $TimeRange:result.t1$ to $TimeRange:result.t2$ Also I check the checkbox for the TimeRange search to Access search results or metadata
... View more
09-08-2025
05:06 PM
Using Splunk Enterprise 9.4 I have created a data source name TimeRange with the SPL Query: | makeresults
| addinfo
| eval t1=strftime(info_min_time,"%Y-%m-%d %H:%M")
| eval t2=strftime(info_max_time,"%Y-%m-%d %H:%M")
| table t1, t2 I have created a Markdown panel with content **Last Updated:** $LastUpdatedBaseSearch:result.friendlyTime$ **[$BaseSearch:job.status$]**
**Time Range:** $TimeRange.t1$ to $TimeRange.t2$ For some reason the range is not showing I did just notice that the Data Source says unused. So is it not being run when the Dashboard is refreshed? All my other charts use a chain search with the BaseSearch as their parent.
... View more
Labels
- Labels:
-
other
08-15-2025
05:56 AM
That worked, thank you.
... View more
08-14-2025
07:30 PM
It is the little things that bug me sometimes. I there anyway to cause the Dashboard Studio Data Source Overview list to sort by the Data Source name.
... View more
Labels
- Labels:
-
Dashboard Studio
08-07-2025
04:25 PM
Any thoughts why it is showing in GMT? It is currently 4 hours ahead, I am EST. "ds_LYYZ83TP": {
"name": "LastUpdatedAuthByResults",
"options": {
"enableSmartSources": true,
"query": "| makeresults | eval _time=\"$AuthorizationsBySource:job.lastUpdated$\", unixTimeStamp=strptime(_time, \"%Y-%m-%dT%H:%M:%S.%QZ\"), friendlyTime=strftime(unixTimeStamp,\"%Y-%m-%d %H:%M:%S\")"
},
"type": "ds.search"
}, My user preferences have my Time Zone as (GMT-400) Eastern Time (US & Canada) My current time is 19:18:01
... View more
08-07-2025
02:28 PM
You are correct. This is a Dashboard Studio in Absolute (not Grid). I will try out your suggestion tonight.
... View more
08-07-2025
11:58 AM
Currently using Dashboard classic and added Markdown Text to the bottom of my pie chart to inform the user when the data was last update. Is there a way in the Markdown Text to format job.lastUpdated? It is currently showing in Zulu. I was also thinking of putting it in the description field, if possible.
... View more
Labels
- Labels:
-
Classic dashboard
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-08-2025
04:49 PM
|
