Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Sideview Utils DateTime Module - Start with Today, Not All Time

$
0
0
Working with the DateTime module I'd like to have a default earliest value of today. I've tried this: ![Sideview Utils][1] I've set the default time first in ValueSetter module to pass down to the DateTime module. Setting earliest in the first ValueSetter module doesn't seem to flow down to the DateTime, then down to the second ValueSetter, then to the Search Module. The first ValueSetter doesn't seem to have any impact. If I set earliest in the second ValueSetter module, that'll work in replacing searching across all time, but when I select another earliest date from the DateTime Module, it doesn't overwrite the earliest value in the second ValueSetter before pushing that value down to the Search Module. Is there any way to set a start earliest value so the search doesn't execute across all time? Mark [1]: /storage/temp/217612-su.png

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>