time range picker

noun

A tool that enables you to quickly define the time range of a search when using Splunk Web. In the Search app, the time range picker appears as a menu at the end of the search bar. You can also define time range pickers with custom sets of time ranges for forms in views and dashboards.

The time range picker enables you to run a search for a preset specified time period, such as Last 15 minutes or Yesterday. You can also use the time range picker to define your own custom time range for a search, or set up a data collection window for a real-time search.

The time range picker is set to All time by default. This searches the entire set of data in your index, from the oldest events to the most current. If you have a lot of data, All time searches can take a lot of time. They're probably overkill if you just want to know about something that happened in the very recent past.

For more information

In the User Manual:

In the Developer Manual:

configuration

configuration file

event processing

character set encoding

segmentation

segment

timestamping

timestamp, timezone offset

default field extraction

host, source, source type, punct


archiving

retention time