SOLVED

Azure Monitor Workbooks unable to read parameters on graphs

%3CLINGO-SUB%20id%3D%22lingo-sub-2080735%22%20slang%3D%22en-US%22%3EAzure%20Monitor%20Workbooks%20unable%20to%20read%20parameters%20on%20graphs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2080735%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EI'd%20read%20the%20article%20to%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fazure-monitor%2Fplatform%2Fworkbooks-interactive%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Eset%20interactive%20parameters%3C%2FA%3E%26nbsp%3B%20and%20it%20worked%20for%20Grid%2C%20Tiles%20and%20Graph%2C%20but%20when%20I%20pick%20another%20visualization%2C%20it%20won't%20work.%20This%20happens%20with%20all%20the%20tables%20I'd%20try.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EOne%20of%20the%20queries%20I%20am%20using%20to%20export%20parameters%3A%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%3E%3CDIV%3E%3CSPAN%3ESecurityAlert%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%7C%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Ewhere%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3BTimeGenerated%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%7BTimeRange%7D%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%7C%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Esummarize%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Ecount%3C%2FSPAN%3E%3CSPAN%3E()%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Eby%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3EAlert%3C%2FSPAN%3E%3CSPAN%3ESeverity%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3EFig.%201-%20Parameters%20setting%3A%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22parametersset.PNG%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F247884iAAE68F55763CE4E0%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22parametersset.PNG%22%20alt%3D%22parametersset.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3EQuery%20I%20use%20to%20project%20the%20exported%20parameters%3A%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CDIV%3E%3CSPAN%3ESecurityAlert%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%7C%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Ewhere%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3BTimeGenerated%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%7BTimeRange%7D%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%7C%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Ewhere%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3EAlert%3C%2FSPAN%3E%3CSPAN%3ESeverity%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3D%3D%3C%2FSPAN%3E%3CSPAN%3E'%7BP_AlertSeverity%7D'%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Eor%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E'All%26nbsp%3Balert%26nbsp%3Bseverities'%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3D%3D%3C%2FSPAN%3E%3CSPAN%3E'%7BP_AlertSeverity%7D'%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%7C%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Esummarize%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3ECount%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3Ecount%3C%2FSPAN%3E%3CSPAN%3E()%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Eby%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3ECompromisedEntity%3C%2FSPAN%3E%3CSPAN%3E%2C%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3ESeverity%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E'%7BP_AlertSeverity%7D'%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%7C%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Etop%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E5%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Eby%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3ECount%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3EFig.%202-%20As%20a%20Grid%2C%20it%20works%20(as%20well%20as%20Tiles%20and%20Graphs)%3A%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22gridres.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F247882i0A4E46EBF85BB9C3%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22gridres.PNG%22%20alt%3D%22gridres.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3EFig.%203-When%20I%20select%20the%20Pie%20chart%20(Or%20any%20of%20the%20Bar%20charts)%2C%20it%20won't%20work%3A%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22piechart.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F247885i4DBE7C88E70FC38F%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22piechart.PNG%22%20alt%3D%22piechart.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3EFig.%204-%20If%20I%20go%20to%20the%20Chart%20Settings%20and%20I%20change%20the%20%22Legend%20Settings%22%20to%20%22Show%20series%20legend%22%20is%20the%20same%2C%20but%20if%20I%20unselect%26nbsp%3Bthe%20legends%2C%20I%20am%20able%20to%20capture%20the%20default%20value%3A%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22defaultvalues.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F247886iE79E23F7CF9CE960%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22defaultvalues.png%22%20alt%3D%22defaultvalues.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3EWhere%20do%20I%20need%20to%20set%20the%20parameters%20to%20click%20over%20the%20Low%2C%20Medium%20or%20High%20and%20get%20the%20list%20I%20see%20in%20the%20Fig.%202-%20%3F%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3EIt%20works%20on%20Grid%2C%20Tiles%20and%20Graph%2C%20it%20doesn't%20on%26nbsp%3Bin%20Pie%20and%20Bar%20charts.%20Didn't%20try%20with%20the%20others.%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3EThanks.%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2081654%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Monitor%20Workbooks%20unable%20to%20read%20parameters%20on%20graphs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2081654%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F824234%22%20target%3D%22_blank%22%3E%40mwolterw%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20need%20to%20export%20the%20%22series%22%20or%20%22x%22%20or%20%22y%22%20for%20Charts.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screenshot%202021-01-21%20095344.jpg%22%20style%3D%22width%3A%20541px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F248003iFA35F8B871296C59%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Screenshot%202021-01-21%20095344.jpg%22%20alt%3D%22Screenshot%202021-01-21%20095344.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20then%20use%20the%20exported%20parameter%20in%20a%20following%20Query%2C%20e.g.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-cpp%22%3E%3CCODE%3ELAQueryLogs%0A%7C%20summarize%20dcount(QueryText)%20by%20'%7BexpRequestClientApp%7D'%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2084210%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Monitor%20Workbooks%20unable%20to%20read%20parameters%20on%20graphs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2084210%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F239477%22%20target%3D%22_blank%22%3E%40Clive%20Watson%3C%2FA%3E%26nbsp%3BIt%20worked%20great%2C%20many%20thanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

 

I'd read the article to set interactive parameters  and it worked for Grid, Tiles and Graph, but when I pick another visualization, it won't work. This happens with all the tables I'd try.

 

One of the queries I am using to export parameters:

 

SecurityAlert 
where TimeGenerated {TimeRange}
summarize count() by AlertSeverity
 
 
Fig. 1- Parameters setting:
parametersset.PNG
 
Query I use to project the exported parameters:
 
SecurityAlert 
where TimeGenerated {TimeRange}
where AlertSeverity =='{P_AlertSeverity}' or 'All alert severities' =='{P_AlertSeverity}'
summarize Count=count() by CompromisedEntitySeverity='{P_AlertSeverity}'
top 5 by Count
 
Fig. 2- As a Grid, it works (as well as Tiles and Graphs):
gridres.PNG
Fig. 3-When I select the Pie chart (Or any of the Bar charts), it won't work:
 
piechart.PNG
 
Fig. 4- If I go to the Chart Settings and I change the "Legend Settings" to "Show series legend" is the same, but if I unselect the legends, I am able to capture the default value:
 
defaultvalues.png
 
Where do I need to set the parameters to click over the Low, Medium or High and get the list I see in the Fig. 2- ?
 
It works on Grid, Tiles and Graph, it doesn't on in Pie and Bar charts. Didn't try with the others.
 
Thanks.
 
 
2 Replies
best response confirmed by mwolterw (New Contributor)
Solution

@mwolterw 

 

You need to export the "series" or "x" or "y" for Charts.  

Screenshot 2021-01-21 095344.jpg

 

You can then use the exported parameter in a following Query, e.g.

 

LAQueryLogs
| summarize dcount(QueryText) by '{expRequestClientApp}'

 

@CliveWatson It worked great, many thanks!