How to get Grafana to display latest data in the graphs?

Grafana version :4.5.2 and OS : macOS

  • **Purpose : Trying to collect logs from firewalls and display on the dashboard

  • How are you trying to achieve it? - By running backend PERL and Python scripts

  • The data that is getting displayed is for the time range 1999-2000. We need current data. I tried to change the time format to UTC everywhere. But that did not work.

  • What did you expect to happen? - Data should have been displayed for any of the time ranges available for Quick range

  • Can you copy/paste the configuration(s) that you are having problems with?

  • Did you receive any errors in the Grafana UI or in related logs? If so, please tell us exactly what they were.

Below is the error in the UI when I select any recent time ranges

{
“root_cause”: [
{
“type”: “query_parsing_exception”,
“reason”: “Failed to parse query [platform:() AND PROCESS:() AND build:()]”,
“index”: “mpbucketcpe”,
“line”: 1,
“col”: 223
}
],
“type”: “search_phase_execution_exception”,
“reason”: “all shards failed”,
“phase”: “query”,
“grouped”: true,
“failed_shards”: [
{
“shard”: 0,
“index”: “mpbucketcpe”,
“node”: “LDQHdCi3Tme5mkzS8qGk_A”,
“reason”: {
“type”: “query_parsing_exception”,
“reason”: “Failed to parse query [platform:() AND PROCESS:() AND build:()]”,
“index”: “mpbucketcpe”,
“line”: 1,
“col”: 223,
“caused_by”: {
“type”: “parse_exception”,
“reason”: "Cannot parse ‘platform:() AND PROCESS:() AND build:()’: Encountered " “)” ") “” at line 1, column 10.\nWas expecting one of:\n …\n “+” …\n “-” …\n …\n “(” …\n “" …\n …\n …\n …\n …\n …\n “[” …\n “{” …\n …\n …\n "” …\n ",
“caused_by”: {
“type”: “parse_exception”,
“reason”: "Encountered " “)” ") “” at line 1, column 10.\nWas


You say “I tried to change the time format to UTC everywhere. But that did not
work.”

  1. Which back-end data store are you using?

  2. If your timestamps are not in UTC, what are they?

  3. Can you give more detail about “that did not work”?

Antony.

This topic was automatically closed after 365 days. New replies are no longer allowed.