Hi,
In my dashboard I have time picker and many single value components with trend.
The query behind each single value contains span of 24 hours and the sinle value is comared to "Custom" with "Auto" option.
For example:
my_query... | timechart span=24h count
I dont actually understand single value behavior.
1. If I choose "Last Year" in the time picker, I see the value **0** (which is correct) but when I press on it and drill down, it opens the results in "new search" with **"Date time range" (9/3/18 3:00:00 AM to 9/4/18 3:00:00 AM) and not "Last Year"**
2. If I choose "All time" in the time picker, I see the value **89** (which I don't know if its correct because on the last 24 hours I didn't ingest any event). When I press on it, it opens the results in "new search" with **"Date time range" (10/9/17 3:00:00 AM to 10/10/17 3:00:00 AM) and not "All Time"**.
Can someone please explian to me:
1. Why the time range is changed when I drill down?
2. Why I get 89 and not 0?
Thank you
↧