topic Re: Can't use graph in new UI Dashboard in DQL

Can't use graph in new UI Dashboard

mark_forrester — Thu, 09 Nov 2023 16:17:38 GMT

So I have a query to take the last value seen per day for a field monthly requests, this filed is a running total per hour of requests and as the name suggests gets reset every month.

fetch bizevents , scanLimitGBytes: 100 | filter event.type == "XXXXXXX" | summarize {monthlyRequests = takeLast(monthlyRequests)},by:{bin(timestamp, 1d)}

I want to graph this on the new UI but the visualization options do not show for any graph

However exactly the same query in the logs and events explorer does allow bar charting

Any ideas why the new UI is not allowing charting using this Grail query?
Also if someone can advise how to get the date to be just the date and not add the 00:00:00 for aesthetic reasons that would be great

EDIT, I fixed the displayed timestamp using this line of DQL instead

| summarize {monthlyRequests = takeLast(monthlyRequests)},by:{Date = formatTimestamp(bin(timestamp, 1d),format:"dd-MM-YYYY")}

Re: Can't use graph in new UI Dashboard

mark_forrester — Thu, 09 Nov 2023 16:07:34 GMT

Also is there a way to do a bin(value, 1M)

It appears that DQL does not match the older intervals in the product and stops at 1d

Time literals

The following time literals can be used to express durations:

ns: Nanoseconds
ms: Milliseconds
s: Seconds
m: Minutes
h: hours
d: Days

Re: Can't use graph in new UI Dashboard

mark_forrester — Thu, 09 Nov 2023 18:03:20 GMT

After some playing I've found half the root cause of the issue.

On ingestion of the BizEvent the field monthlyRequests is actually seen a string field and to make the new UI use it as a number I had to add the toLong() to the query.

| summarize {`Monthly Requests` = toLong(takeLast(monthlyRequests))},by:{Date = formatTimestamp(bin(timestamp, 1d),format:"MM-dd-YYYY")}

It seems the log and events app does this without having to use the toLong() to convert it to a number so there is an inconsistency between the apps on the platform.

However some charts have appeared but not the required line/bar charts