Skip to main content

Restricted Operators in Dashboards

This page has information about restrictions and rules about using Sumo Logic log search operators with dashboards.

Dashboard restrictions‚Äč

The following operators cannot be used with dashboards:

Auto refresh restrictions‚Äč

The following operators cannot be used in Auto refresh:

The following search modifier cannot be used in Auto refresh.

  • _dataTier

Include only after the first group-by phrase‚Äč

You can use the following operators in dashboard panels:

  • [Accum](/docs/search/search-query-language/search-operators/accum/)
  • [Backshift](/docs/search/search-query-language/search-operators/backshift/)
  • [Diff](/docs/search/search-query-language/search-operators/diff/)
  • [Join](/docs/search/search-query-language/search-operators/join/)
  • [Limit](/docs/search/search-query-language/search-operators/limit/)
  • [RollingStd](/docs/search/search-query-language/search-operators/rollingstd/)
  • [Smooth](/docs/search/search-query-language/search-operators/smooth/)
  • [Sort](/docs/search/search-query-language/search-operators/sort/)
  • [Top](/docs/search/search-query-language/search-operators/top/)
  • [Total](/docs/search/search-query-language/search-operators/total/)
  • [Transaction](/docs/search/search-query-language/transaction-analytics/transaction-operator/) By Flow
Example
"error"
| timeslice 1d
| count by _timeslice
| sort by _timeslice asc
| accum _count as running_total

Notes‚Äč

You can use the count_frequent operator in dashboard queries, but the number of results returned is limited to the top 100 most frequent results. All results are available when the search is run on the Search page, but only the top 100 are displayed in the Panel.

Legal
Privacy Statement
Terms of Use

Copyright © 2023 by Sumo Logic, Inc.