Splunk Search App Customization

By default, Splunk search option All time is selected. To change the default option,

1) Login to Splunk server
2) From App dropdown at the top right, choose Manage Apps
3) Click view configuration corresponding to search link
4) Click dashboard
5) Change the selected param to Last 15 minutes instead of All time.
       <module name="TimeRangePicker">
            <param name="selected">Last 15 minutes</param>
You can choose any of the text value from search dropdown.
6) Your default search value is 15 minutes!