|
I set the default value for TimeRangePicker to 5 minute window and I also mentioned the isSticky to false for my view. For 'admin' user, It always shows selected time as '1 hour window' on page load no matter what I set the default value to. For the users which I created, It works fine. Is there anything I am am missing. PS: I created customized times.conf for my app. |
|
The issue here concerns viewstates and the somewhat unintuitive behavior of isSticky=False This is discussed in detail here: TimeRangePicker Won't Hold Value on Dashboard on Splunk Answers and the short version is that you would expect that setting isSticky to False would
a) no longer preserve or remember any values going forward. But unintuitively, it only does "a". So any user that still has a previously stuck value, will get that value set forever. you can go find a viewstates.conf stanza for the admin user, and manually delete their preserved viewstate for the flashtimeline view. Again, this answer discusses it more fully: TimeRangePicker Won't Hold Value on Dashboard on Splunk Answers |
|
FYI, this may be helpful: How do I set the default time range for the search bar of the search app's summary view? on Splunk Answers |
This was ansered here: http://splunk-base.splunk.com/answers/11306/splunk-ignoring-params-in-dashboard