Default configuration options
Set properties in the
visualizations stanzas under
global or specify individual visualization types or data source types.
|option or property||type||default||description|
|refresh (data sources only)||string||n/a||Specify the refresh interval with a time expression. For example, "5s" for five seconds or "1m" for one minute. See refreshType and refresh example.|
|refreshType (data sources only)||(delay | interval)||delay||Indicate the starting time for a search to refresh. Use |
|queryParameters.earliest (data sources only)||string||n/a||Specify the earliest time to search for events. Choose from year (y), month (m), week (w), day (d), minute (m), second (s), or 0 for all time. For example, if you want to run a search that runs for all time, see The queryParameters example. Defaults with |
|queryParameters.latest (data sources only)||string||n/a||Specify the latest time to search for events. Choose from year (y), month (m), week (w), day (d), minute (m), second (s), or 0 for all time. For example, if you want to run a search that runs for all time, see The queryParameters example. Defaults with |
|showProgressBar (visualizations only)||boolean||false||Specify whether to show a loading progress bar for a visualization. You can set the progress bar at the component level at the same level as |
|showLastUpdated (visualizations only)||boolean||false||Specify whether to show the last time a visualization was updated. This time is shown on the bottom of a visualization in a tag in both Edit mode and View mode. These settings are not options but properties. You set the properties at the same level as the options field.|
Adding a progress bar to a small visualization might make the visualization too small to show data. If this occurs, increase the visualization's size until you can see your data.
It is important to note that if you have defined an option in a data source stanza, it will override the same option set in defaults for that stanza only.
Don't specify default intervals of time that are too short. Any interval less than one minute might not give the search jobs enough time to run, or may have a heavy performance impact on your dashboard. You can specify a string with the interval, such as "1m" for one minute. If you specify an integer without a time unit, the default unit is seconds.
Dynamic options syntax selector functions
This documentation applies to the following versions of Splunk Cloud Platform™: 9.0.2305 (latest FedRAMP release), 9.1.2308