Dashboards & Visualizations

How to set timerangepicker as realtime by default?



I need set timerangepicker to appear like rt-30s by default in my dashboards.
How do I do that? Can I?

I've tried:

<module name="TimeRangePicker" layoutPanel="panel_row1_col1" autoRun="True">
  <param name="default">real_time_last30s</param>

Where real_time_last30s is a stanza in my times.conf

Thank you in advance

Tags (1)


Hi andelval

you almost got it, you have to use the label of your stanza not the stanza name itself, if a stanza in times.conf looks like this:

 label = myInsaneRTtimeRange
 header_label = this is a test for default timerangepicker
 earliest_time = rt-5m
 latest_time = rt
 order = 1

your dashboard xml will look like this:

<module name="TimeRangePicker">
  <param name="selected">myInsaneRTtimeRange</param>

this will set the default correct.

hope this helps

cheers, MuS

0 Karma


I have encountered this issue today as well. I tried as mentioned in the documentation to use the label from times.conf and it still doesn't default to this value.

I also tried to use the deprecated selected paramater as well with no success.

0 Karma
Get Updates on the Splunk Community!

Set Up More Secure Configurations in Splunk Enterprise With Config Assist

This blog post is part 3 of 4 of a series on Splunk Assist. Click the links below to see the other ...

Observability Highlights | November 2022 Newsletter

 November 2022Observability CloudEnd Of Support Extension for SignalFx Smart AgentSplunk is extending the End ...

Enterprise Security Content Update (ESCU) v3.54.0

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...