{{ctrl.lastQuery}}
Format as Table: - return any set of columns Format as Time series: - Requires a column of type datetime - returns the first column with a numeric datatype as the value - (Optional: returns the first column with type string to represent the series name. If no column is found the column name of the value column is used as series name) Example Time Series Query: AzureActivity | where $__timeFilter() | summarize count() by Category, bin(TimeGenerated, 60min) | order by TimeGenerated asc Macros: - $__timeFilter() -> TimeGenerated ≥ datetime(2018-06-05T18:09:58.907Z) and TimeGenerated ≤ datetime(2018-06-05T20:09:58.907Z) - $__timeFilter(datetimeColumn) -> datetimeColumn ≥ datetime(2018-06-05T18:09:58.907Z) and datetimeColumn ≤ datetime(2018-06-05T20:09:58.907Z) - $__escapeMulti($myTemplateVar) -> $myTemplateVar should be a multi-value template variables that contains illegal characters - $__contains(aColumn, $myTemplateVar) -> aColumn in ($myTemplateVar) If using the All option, then check the Include All Option checkbox and in the Custom all value field type in: all. If All is chosen -> 1 == 1 Or build your own conditionals using these built-in variables which just return the values: - $__from -> datetime(2018-06-05T18:09:58.907Z) - $__to -> datetime(2018-06-05T20:09:58.907Z) - $__interval -> 5m Examples: - ยก where $__timeFilter - | where TimeGenerated ≥ $__from and TimeGenerated ≤ $__to - | summarize count() by Category, bin(TimeGenerated, $__interval)
{{ctrl.lastQueryError}}