Hi
I am using splunk enterprise.
I am using it for integration with service now.
So i am creating a link in service now with the path to the things..
example
a application named xyz in service now..
and dashboard named xyz in splunk.
so i created a button in service now with URL of dashboard like "http:1.1.1.1/splunk/dashboards/xyz"
and its working fine
now i want to pass on parameters for time like "http:1.1.1.1/splunk/dashboards/xyz?earliest=0&latest="
but even when i change earliest =x and latest =y tha dashboard is not getting effected, is there a way to change it.
and similary i have to see the related serach content so, i configured another button with point to search
"http:1.1.1.1/splunk/search/search?q=search%20source%3D"filename.xyzsearch.mode=smart&earliest=&latest="
again i want to search to run from a particular date.
so but when i testing some trails the i can see earliest and latest are taking some big 6-7 digit count when i take from particular date.
example "earliest=14o59708200&latest=1459881000"
and so how to pass the parameter.
can any one help with understanding the URl string of splunk.
↧