Hi Team,
I created a dashboard widget where i am try to get the hit counts of URLs for a span of 10m window
I was able to get the required data from the below query,
-----------------------------------------------------------------------------------------------------------------
metadata.event_type = "NETWORK_CONNECTION"
target.url != ""
target.url = $url
match:
$url over 10m
outcome:
$counts = count($url)
$latest_ts = max(metadata.event_timestamp.seconds)
// 10-minute bucket = 600 seconds
$bucket_start = math.floor($latest_ts / 600) * 600
$event_time = timestamp.get_timestamp($bucket_start, "%F %T", "GMT")
$source_type = array_distinct(metadata.log_type)
order:
$event_time asc
limit:
10000
------------------------------------------------------------------------------------------------------------------
This works if the count of URL is less.
If i test it out in my production instance the number of URL’s and count is exceeding the 10000 rows limit and whenever i refresh the dashboard it's causing latency and freezing issue.
Is there any work around available ?
