Forum Discussion
panug
Jul 29, 2025Copper Contributor
timechart legend in Azure Data Explorer
Hi, I'm creating a timechart dashboard in Azure Data Explorer and facing an issue with the legend labels. The legends have extra prefixes and suffixes, such as "Endpoint" or "Count". How can I remove...
Adeelaziz
Aug 26, 2025Brass Contributor
You can try customizing the series labels using the extend operator to create a new column, and then use that with project and render timechart.
requests
| where timestamp between (_startTime .. _endTime)
and (url endswith "/emailtocase" or url endswith "/classify" or url endswith "/attachments")
| extend Endpoint = extract(@"([^/]+)$", 1, url)
| summarize Count = count() by bin(timestamp, 5m), Endpoint
| extend CustomLabel = Endpoint
| project timestamp, Count, CustomLabel
| render timechart with (series=CustomLabel)