#Timeslice environment generator#
Buckets from the timeslice generator need to be based on a time period.In Live Dashboards, you must use the fillmissing operator after an aggregate operator.Use the takeLast option to fill in values for non-key fields by taking the value from the previous timeslice. This requires the timeslice generator be defined. The syntax for each specification looks like: They allow you to configure the default constant values for one or more non-key fields. The all option uses all the distinct values for the field from the query results. If no time period is specified, the same time period from the previous timeslice operator is used. Any missing values are filled based on the specified nonKeyFieldSpecs, one for each key field. The keyFieldGenerator generates key fields that the operator then references to ensure all specified combinations of values are present.For example, if you used the following query: You can define multiple generators, which enumerate tuples for every combination of the values enumerated by each of the generators (such as the Cartesian product). Each generator applies to one field and enumerates all the values that you'd like to appear in the output for that field, even if some of those values are not present in the data. The fillmissing operator allows you to define generators over the fields in the output. The fillmissing operator addresses this shortcoming by allowing you to specify groups that should be represented in the output, even if those groups have no data. For example, if you plot a line chart across timeslices with missing data, the chart will interpolate across the missing timeslices and represent them deceptively as nonempty. Missing data can lead to misleading visualizations.For example, the outlier operator can't catch anomalies arising from missing data because it can only mark an existing timeslice as anomalous. The lack of data is sometimes also an interesting event, but there is no easy way to capture this information.
For example, if your query is grouping by timeslice, then only the timeslices that have data are returned. When you run a standard group-by query, Sumo Logic only returns non-empty groups in the results. The fillmissing operator allows you to specify groups that should be represented in data output.
0 kommentar(er)
