SOLVED

Tiles with custom time range stuck in 24 hours even using timegenerated > ago(7d)

%3CLINGO-SUB%20id%3D%22lingo-sub-175486%22%20slang%3D%22en-US%22%3ETiles%20with%20custom%20time%20range%20stuck%20in%2024%20hours%20even%20using%20timegenerated%20%26gt%3B%20ago(7d)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-175486%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20everyone%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20am%20building%20dashboards%20using%20both%20Tiles%20created%20on%20View%20Designer%20and%20charts%20from%20Analytics.%20The%20issue%20I%20have%20is%20that%20the%20tiles%20I%20create%20are%20all%20gathering%20data%20from%201%20day%20instead%20of%20the%207%20days%20as%20stated%20in%20the%20query%20with%20timegenerated%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EEvent%3CBR%20%2F%3E%7C%20where%20EventID%20%3D%3D%201000%20and%20EventLevelName%20%3D%3D%20%22Error%22%26nbsp%3B%20and%20TimeGenerated%20%26gt%3B%20ago(7d)%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFor%20any%20reason%2C%20the%20query%20is%20being%20executed%20in%20a%20custom%20time%20range%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Capture.JPG%22%20style%3D%22width%3A%20342px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F30860i64A9DB13FBD6A340%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Capture.JPG%22%20alt%3D%22Capture.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAnd%20I%20could%20not%20find%20a%20way%20to%20change%20it.%20Of%20course%2C%20I%20can%20do%20it%20manually%20after%20clicking%20in%20the%20tile%2C%20but%20when%20you%20access%20the%20dashboard%20again%20or%20refreshes%2C%20it%26nbsp%3B%20shows%20the%20same%20time%20range%20(1%20day).%20Is%20there%20a%20place%20where%20a%20dashboard%20configures%20the%20standard%20time%20range%20it%20will%20use%20%3F%20Why%20is%20it%20overriding%20the%20query%20time%20range%20configuration%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-175486%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Log%20Analytics%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EQuery%20Language%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-178419%22%20slang%3D%22en-US%22%3ERe%3A%20Tiles%20with%20custom%20time%20range%20stuck%20in%2024%20hours%20even%20using%20timegenerated%20%26gt%3B%20ago(7d)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-178419%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20your%20reply.%20I%20am%20using%20a%20mix%20of%20Log%20Analytics%20queries%20and%20tiles%20created%20with%20View%20Designer.%20I%20will%20take%20into%20consideration%20the%20limitations%20you%20just%20described.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-175704%22%20slang%3D%22en-US%22%3ERe%3A%20Tiles%20with%20custom%20time%20range%20stuck%20in%2024%20hours%20even%20using%20timegenerated%20%26gt%3B%20ago(7d)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-175704%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%0A%3CP%3EThis%20is%20the%20expected%20behavior.%20All%20views%20in%20View%20designer%20are%20scoped%20to%20the%20last%201%20day%20and%20even%20if%20you%20have%20longer%20period%20in%20your%20query%20that%20will%20be%20overridden.%20Only%20if%20you%20specify%20lower%20period%20that%20will%20be%20taken%20into%20account.%20There%20is%20also%20no%20option%20to%20change%20that%20default%20scope.%20If%20someone%20wants%20to%20use%20longer%20period%20they%20will%20have%20to%20setup%20that%20manually%20every%20time%20they%20open%20the%20view.%20As%20alternative%20you%20can%20try%20to%20configure%20Azure%20Dashboards%20with%20Log%20Analytics%20data.%20Those%20allow%20scope%20defined%20in%20the%20query%20up%20to%2014%20days.%20Of%20course%20Azure%20Dashboards%20does%20not%20offer%20the%20same%20functionality%20and%20dashboards%20like%20view%20designer.%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hello everyone,

 

I am building dashboards using both Tiles created on View Designer and charts from Analytics. The issue I have is that the tiles I create are all gathering data from 1 day instead of the 7 days as stated in the query with timegenerated:

 

Event
| where EventID == 1000 and EventLevelName == "Error"  and TimeGenerated > ago(7d) 

 

For any reason, the query is being executed in a custom time range:

 Capture.JPG

 

And I could not find a way to change it. Of course, I can do it manually after clicking in the tile, but when you access the dashboard again or refreshes, it  shows the same time range (1 day). Is there a place where a dashboard configures the standard time range it will use ? Why is it overriding the query time range configuration ?

2 Replies
best response confirmed by Stanislav Zhelyazkov (MVP)
Solution

Hi

This is the expected behavior. All views in View designer are scoped to the last 1 day and even if you have longer period in your query that will be overridden. Only if you specify lower period that will be taken into account. There is also no option to change that default scope. If someone wants to use longer period they will have to setup that manually every time they open the view. As alternative you can try to configure Azure Dashboards with Log Analytics data. Those allow scope defined in the query up to 14 days. Of course Azure Dashboards does not offer the same functionality and dashboards like view designer.

Thanks for your reply. I am using a mix of Log Analytics queries and tiles created with View Designer. I will take into consideration the limitations you just described.