Logstreem
Dashboard elements

Dashboard elements

Every chart type and the result shape it needs.

The element type is a rendering decision. The query decides what is possible.

ElementNeedsGood for
timeseriesA bin() time column plus a numberRates and latencies over time
statisticA single row, single numberThe one number at the top left
gaugeOne number, plus min and maxUtilisation against a known ceiling
tableAnythingTop-N lists
heatmapTwo dimensions plus a numberLatency distribution, error density by region
pieOne dimension plus a numberShare of total. Use sparingly, and never above six slices
log-streamRaw events, no aggregationRecent errors, in context
noteNothingMarkdown: runbook links, what to do at 3am
A time series element
read top to bottom
1['api-gateway-prod']
2| summarize requests = count(), errors = countif(status >= 500)
3 by bin_auto(_time), service
4| order by _time asc

Use bin_auto in dashboards

A fixed bin(_time, 1m) draws 10,080 points when someone switches the range to 7 days, and the browser stops responding. bin_auto follows the range — see time and bins.

The note element is underrated

A markdown note on the dashboard, saying what the charts mean and what to do when they go red, is worth more than a ninth chart. It is the difference between a dashboard and a runbook.