I was looking at ways to show recent logins on a SumoLogic dashboard. I can query login information out of a log. In order to put that search on a dashboard panel, it has to be an aggregate query, so I did a values by timeslice:
search query here
| timeslice 5m
| values(username) by _timeslice
In the log viewer, the data looks fine:
But if I add it to the dashboard, the timeslice data vanishes, leaving an empty time column:
Why? Can I fix it?
Please sign in to leave a comment.