topic Re: DQL timeseries filter by list of services in DQL

DQL timeseries filter by list of services

PVThach — Wed, 19 Nov 2025 05:17:38 GMT

I am trying to create a dashboard of external services health. I am able to get list of 20 external services with this DQL, which I am thinking to use a variable input to the dashboard.

I am not sure how to filter timeseries. My timeseries look like this:

| fieldsAdd Availability = 100 - (Errors / Throughput) * 100

| fields Service,

Status = if(Availability < 98.00, "🔴 Unhealthy", else: "✅ Healthy"),
StatusSort = if(Availability < 98.00, 0, else: 1),
Availability,
Throughput,
Errors,
Latency_p75,
Latency_p90,
dt.entity.service
| sort StatusSort asc

Re: DQL timeseries filter by list of services

t_pawlak — Wed, 19 Nov 2025 09:03:02 GMT

Hi,
The reason your approach doesn’t work is that dashboard DQL cannot join fetch results with timeseries.
join only works when both sides produce the same type of records, and fetch dt.entity.* produces entity records, while timeseries produces metric records. That’s why filtering the second query based on the first one isn’t supported directly.

try this approach:

timeseries { latency_p75 = percentile(dt.service.request.response_time, 75), latency_p90 = percentile(dt.service.request.response_time, 90), Throughput = sum(dt.service.request.count), Errors = sum(dt.service.request.failure_count) }, by: { dt.entity.service } | filter isExternalService | filter isNotNull(publicDomainName) | filterOut contains(publicDomainName, "my.com") | filter serviceType == "WEB_REQUEST_SERVICE" | fieldsAdd Service = entityName(dt.entity.service), Latency_p75 = arrayAvg(latency_p75), Latency_p90 = arrayAvg(latency_p90), Throughput = arraySum(Throughput), Errors = arraySum(Errors) | fieldsAdd Availability = 100 - (Errors / Throughput) * 100 | fieldsAdd Status = if(Availability < 98.0, ":red_circle: Unhealthy", else: ":white_heavy_check_mark: Healthy"), StatusSort = if(Availability < 98.0, 0, else: 1) | fields Status, Service, Availability, Throughput, Errors, Latency_p75, Latency_p90, publicDomainName, dt.entity.service | sort StatusSort asc, Availability asc

I tested it without variables, because I don't have it on my env, but this is result:

First use this query in a tile, then select Use as variable
Then filter your timeseries using that variable
I hope it will work

Re: DQL timeseries filter by list of services

PVThach — Wed, 19 Nov 2025 14:42:39 GMT

It didn't work for me. I am getting:

The field isExternalService doesn't exist.

Any filter for field in dt.entity.service result in field doesn't exist.

| filter isExternalService
| filter isNotNull(publicDomainName)
| filterOut contains(publicDomainName, "my.com")
| filter serviceType == "WEB_REQUEST_SERVICE"

I tried running in dashboard and notebook, same result.

Re: DQL timeseries filter by list of services

t_pawlak — Wed, 19 Nov 2025 15:14:37 GMT

Hi, try this

timeseries { latency_p75 = percentile(dt.service.request.response_time, 75), latency_p90 = percentile(dt.service.request.response_time, 90), Throughput = sum(dt.service.request.count), Errors = sum(dt.service.request.failure_count) }, by: { dt.entity.service } | fieldsAdd isExternalService = entityAttr(dt.entity.service, "isExternalService"), publicDomainName = entityAttr(dt.entity.service, "publicDomainName"), serviceType = entityAttr(dt.entity.service, "serviceType") | filter isExternalService | filter isNotNull(publicDomainName) | filterOut contains(publicDomainName, "my.com") | filter serviceType == "WEB_REQUEST_SERVICE" | fieldsAdd Service = entityName(dt.entity.service), Latency_p75 = arrayAvg(latency_p75), Latency_p90 = arrayAvg(latency_p90), Throughput = arraySum(Throughput), Errors = arraySum(Errors) | fieldsAdd Availability = 100 - (Errors / Throughput) * 100 | fieldsAdd Status = if(Availability < 98.0, ":red_circle: Unhealthy", else: ":white_heavy_check_mark: Healthy"), StatusSort = if(Availability < 98.0, 0, else: 1) | fields Status, StatusSort, Service, Availability, Throughput, Errors, Latency_p75, Latency_p90, publicDomainName, dt.entity.service | sort StatusSort asc, Availability asc

Re: DQL timeseries filter by list of services

PVThach — Wed, 19 Nov 2025 17:10:09 GMT

Perfect, thanks!