SOLVED
Home

Changing the X-Axis range on a custom view?

%3CLINGO-SUB%20id%3D%22lingo-sub-104389%22%20slang%3D%22en-US%22%3EChanging%20the%20X-Axis%20range%20on%20a%20custom%20view%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-104389%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20currently%20getting%20%22Disk%20Reads%2Fsec%22%20and%20%22Disk%20Writes%2Fsec%22%20from%20the%20windows%20performance%20counters%20and%20pulling%20them%20into%20OMS.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20use%20the%20Advanced%20Editor%2C%20the%20timechart%20I%20generate%20looks%20great%20as%20it%20begins%20at%20the%20start%20of%20my%20data.%20When%20I%20take%20the%20same%20query%2C%20and%20put%20it%20into%20a%20line%20chart%20within%20a%20custom%20view%2C%20the%20data%20gets%20all%20scrunched%20up%20as%20I%20am%20a%201%20second%20interval%20and%20the%20line%20chart%20has%20an%20X-Axis%20range%20of%2024%20hours.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20any%20way%20to%20change%20the%20X-Axis%20range%20on%20a%20custom%20view%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20is%20my%20query%3A%26nbsp%3B%3C%2FP%3E%3CPRE%3EPerf%20%0A%7C%20where%20ObjectName%20%3D%3D%20%22LogicalDisk%22%20%0A%20%20%20%20and%20CounterName%20%3D%3D%20%22Disk%20Reads%2Fsec%22%20%0A%20%20%20%20or%20CounterName%20%3D%3D%20%22Disk%20Writes%2Fsec%22%20%0A%7C%20where%20(%20InstanceName%20!%3D%20%22_Total%22)%20%20%20%0A%7C%20summarize%20avg(CounterValue)%20by%20bin(TimeGenerated%2C%201s)%2C%20InstanceName%26nbsp%3B%26nbsp%3B%3C%2FPRE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-104389%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Log%20Analytics%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-105533%22%20slang%3D%22en-US%22%3ERe%3A%20Changing%20the%20X-Axis%20range%20on%20a%20custom%20view%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-105533%22%20slang%3D%22en-US%22%3E%3CP%3ENo%20you%20can't%20pin%20to%20Custom%20View%20in%20View%20Designer%2C%20but%20you%20can%20pin%20it%20to%20Azure%20Dashboards%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-105524%22%20slang%3D%22en-US%22%3ERe%3A%20Changing%20the%20X-Axis%20range%20on%20a%20custom%20view%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-105524%22%20slang%3D%22en-US%22%3E%3CP%3ECan%20you%20pin%20an%20advanced%20analytics%20query%20to%20a%20custom%20view%20within%20the%20View%20Designer%20in%20Log%20Analyics%3F%20It's%20not%20possible%20at%20the%20moment%2C%20right%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-105151%22%20slang%3D%22en-US%22%3ERe%3A%20Changing%20the%20X-Axis%20range%20on%20a%20custom%20view%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-105151%22%20slang%3D%22en-US%22%3E%3CP%3EActually%2C%20bin%20of%201sec%20gives%20me%20a%20warning%20in%20the%20Advanced%20Portal.%20%26nbsp%3BAveraging%20on%201min%20should%20still%20show%20spikes%20and%20be%20suitable%20for%20analysis.%20%26nbsp%3BMost%20of%20the%20perf%20data%20isn't%20sampling%20at%201sec%20anyway.%20%26nbsp%3BKeep%20in%20mind%20that%20you%20can%20also%20configure%20alert%20rules%20on%20near%20real%20time%20perf%20data%20to%20quickly%20identify%20anomolies%20as%20well.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-105116%22%20slang%3D%22en-US%22%3ERe%3A%20Changing%20the%20X-Axis%20range%20on%20a%20custom%20view%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-105116%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20should%20be%20able%20to%20look%20at%20that%20view%20in%20the%20advanced%20analytics%20portal%20and%20then%20pin%20it%20to%20Azure%20Dashboards.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-105098%22%20slang%3D%22en-US%22%3ERe%3A%20Changing%20the%20X-Axis%20range%20on%20a%20custom%20view%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-105098%22%20slang%3D%22en-US%22%3E%3CP%3EBrian%2C%3C%2FP%3E%3CP%3EBeing%20able%20to%20look%20at%20resource%20usage%20in%201%20second%20bins%20is%20not%20an%20unreasonable%20or%20unusual%20requirement.%205%20minute%20bins%20that%20show%20a%20flat%2020%25%20usage%20of%20disk%20or%20memory%20or%20CPU%20can%26nbsp%3Brepresent%20a%20normal%20load%2C%20or%20it%20can%20represent%20a%20normal%2010%25%20load%20plus%20a%20bad%20spike%20that%20is%20pegging%20the%20resource%20for%2030%20seconds%20straight%20once%20every%205%20minutes%20and%20having%20a%20major%20impact%20on%20end%20users%20and%20one's%20business.%20Ops%20engineers%20need%20to%20be%20able%20to%20look%20at%20and%20visualize%20historical%20logs%20non-aggregated.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-104920%22%20slang%3D%22en-US%22%3ERe%3A%20Changing%20the%20X-Axis%20range%20on%20a%20custom%20view%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-104920%22%20slang%3D%22en-US%22%3E%3CP%3E1)%20When%20you%20say%20%22pulling%20into%20OMS%22%20-%20Do%20you%20mean%20the%20Log%20Search%20page%20in%20OMS%20or%20the%20View%20Designer%20or%20overview%20tile.%3C%2FP%3E%0A%3CP%3E2)%20By%20Advanced%20Editor%20do%20you%20mean%20Advanced%20Analytics%20portal%20-%20correct%20%3F%3C%2FP%3E%0A%3CP%3E3)%20By%20Custom%20View%20--%20I%20am%20assuming%20you%20created%20a%20custom%20view%20in%20View%20Designer%2C%20It%20doesn't%20support%20these%20many%20data%20points.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-104837%22%20slang%3D%22en-US%22%3ERe%3A%20Changing%20the%20X-Axis%20range%20on%20a%20custom%20view%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-104837%22%20slang%3D%22en-US%22%3E%3CP%3EMy%20guess%20is%20you're%20overloading%20your%20chart%20with%20too%20much%20data.%20%26nbsp%3BI%20just%20tried%20it%20out%2C%20and%20increasing%20the%20bin%20size%20seems%20to%20correct%20it.%20%26nbsp%3B1sec%20is%20pretty%20extreme%20anyway%20for%20a%20chart%20anyway.%20%26nbsp%3B1min%20or%20even%205min%20uses%20the%20same%20data%20and%20should%20display%20the%20chart%20fine.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Steven Neville
New Contributor

I'm currently getting "Disk Reads/sec" and "Disk Writes/sec" from the windows performance counters and pulling them into OMS.

 

If I use the Advanced Editor, the timechart I generate looks great as it begins at the start of my data. When I take the same query, and put it into a line chart within a custom view, the data gets all scrunched up as I am a 1 second interval and the line chart has an X-Axis range of 24 hours.

 

Is there any way to change the X-Axis range on a custom view?

 

This is my query: 

Perf 
| where ObjectName == "LogicalDisk" 
    and CounterName == "Disk Reads/sec" 
    or CounterName == "Disk Writes/sec" 
| where ( InstanceName != "_Total")   
| summarize avg(CounterValue) by bin(TimeGenerated, 1s), InstanceName  

 

7 Replies
Solution

My guess is you're overloading your chart with too much data.  I just tried it out, and increasing the bin size seems to correct it.  1sec is pretty extreme anyway for a chart anyway.  1min or even 5min uses the same data and should display the chart fine. 

1) When you say "pulling into OMS" - Do you mean the Log Search page in OMS or the View Designer or overview tile.

2) By Advanced Editor do you mean Advanced Analytics portal - correct ?

3) By Custom View -- I am assuming you created a custom view in View Designer, It doesn't support these many data points.

 

Brian,

Being able to look at resource usage in 1 second bins is not an unreasonable or unusual requirement. 5 minute bins that show a flat 20% usage of disk or memory or CPU can represent a normal load, or it can represent a normal 10% load plus a bad spike that is pegging the resource for 30 seconds straight once every 5 minutes and having a major impact on end users and one's business. Ops engineers need to be able to look at and visualize historical logs non-aggregated.

You should be able to look at that view in the advanced analytics portal and then pin it to Azure Dashboards.

Actually, bin of 1sec gives me a warning in the Advanced Portal.  Averaging on 1min should still show spikes and be suitable for analysis.  Most of the perf data isn't sampling at 1sec anyway.  Keep in mind that you can also configure alert rules on near real time perf data to quickly identify anomolies as well.


Can you pin an advanced analytics query to a custom view within the View Designer in Log Analyics? It's not possible at the moment, right?

No you can't pin to Custom View in View Designer, but you can pin it to Azure Dashboards

Related Conversations
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
28 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
2 Replies
*Updated 9/3* Syncing in Microsoft Edge Preview Channels
Elliot Kirk in Articles on
202 Replies
Early preview of Microsoft Edge group policies
Sean Lyndersay in Discussions on
65 Replies