Forum Discussion

panug's avatar
panug
Copper Contributor
Jul 29, 2025

timechart legend in Azure Data Explorer

Hi, I'm creating a timechart dashboard in Azure Data Explorer and facing an issue with the legend labels. The legends have extra prefixes and suffixes, such as "Endpoint" or "Count". How can I remove these and show only the actual value in the legend? 

Thank you!

1 Reply

  • Adeelaziz's avatar
    Adeelaziz
    Brass Contributor

    You can try customizing the series labels using the extend operator to create a new column, and then use that with project and render timechart.

    requests
    | where timestamp between (_startTime .. _endTime)
      and (url endswith "/emailtocase" or url endswith "/classify" or url endswith "/attachments")
    | extend Endpoint = extract(@"([^/]+)$", 1, url)
    | summarize Count = count() by bin(timestamp, 5m), Endpoint
    | extend CustomLabel = Endpoint
    | project timestamp, Count, CustomLabel
    | render timechart with (series=CustomLabel)

     

Resources