Question

Custom Dashboards

+8

Good morning,

Im having issues with a native dashboard, and why i can’t view the data.

For example if my search is “between days” it shows data

But if my search is for example “Last 2 days” it does not shows anything.

Im wondering why is this happening.

Maybe is because of the query?

Thanks.

+8

To add more details, for example in a search like “past 3 weeks” it works.

one of the query, for example the one who counts the events is

metadata.log_type = "BINDPLANE_AGENT"

outcome:

$Count = math.round(count(metadata.id), 2)

+1

Do you have a match: section over 48 hours? If so, ircc, you would not get results with windows smaller than that.

match:
$something over 48h //which is your max, coincidentally

Adding the whole yara-l for at least one widget would be helpful.

Sign up