Skip to main content
Skip table of contents

Using Live Dashboards

This page explains the key components of live dashboards, as well as their applications and uses.

Timeframe picker and time granularity

Filter dashboard data with predefined or Custom timeframes using the timeframe picker in the top-right corner of the Dashboard page.

Nexthink translates your choice into an NQL query and applies it to all dashboard widgets.

The predefined timeframes available are Last hour, Last 6 hours, Last 24 hours, Last 7 days, Last 30 days, Last 90 days, Last 6 months and Last year.

For Custom timeframes the maximum lookback and maximum selected duration is 395 days.

Depending on the selected timeframe, you can set time granularity By 15 min, By hour, By day, By week or By month to identify patterns and troubleshoot issues.

Keep in mind, that changes in time granularity only updates line charts.

Refer to the Timeframe picker documentation for details on how the system implements the timeframe picker in the NQL queries for dashboards.

KPI formatting

The system shortens large numbers with appropriate suffixes on the Dashboard page. Hover over a metric to see the raw number.

Action menu

Use the action menu next to the timeframe picker to Edit, Duplicate, Export or Delete a dashboard.

Refer to the Managing live dashboards documentation to learn how to create, manage and customize live dashboards.

Using filter widgets

If the dashboard includes filter widgets, they will appear at the top of the page. Typically, you can filter by platform, device, location, hardware and other parameters configured for the dashboard.

Refer to the Managing live dashboards documentation to add, manage and customize filter widgets.

In addition, refer to the Filter widget documentation to learn how the system implements filters in NQL queries for dashboards.

Widget action menu

There are two types of actions you can access from the widget’s action menu on the Dashboard page:

View investigation

From the action menu of a specific dashboard widget, select View investigation to open the Investigations page for the original NQL of the widget plus any applied filters to the page, the time duration, and granularity.

The View investigation action is available for all visualization widgets.

View investigation

Example of viewing an investigation

View investigation of KPI showing the number of devices with crashes over the past 1 day.

The original NQL of the KPI is:

CODE
devices
| with execution.crashes during past 1d
| summarize devices = count()

Apply the following filters to the dashboard:

  • Last hour from the timeframe picker

  • Mac from the OS filter

The Investigations page shows results using a modified NQL query:

CODE
devices during past 60min 
| where device.operating_system.platform == macOS 
| with execution.crashes during past 60min 
| where device.operating_system.platform == macOS 
| summarize devices = count()

The modified query on the Investigations page includes:

  • The filter modification where device.operating_system.platform == macOS

  • The timeframe picker modification during past 60min

Drill down to …

From the action menu of a specific dashboard widget, select the Drill down to … option to open the Investigation page and show the results of the NQL query on the root table of the query, such as an object or event defined in the first line of the query.

For example, Drill down to devices for the devices NQL table.

Currently, the Drill down to … feature is only available for the KPI and bar chart widgets

Drill down to devices

You can access Drill down to … on each row item in a bar chart.

Drill down to devices on the bar chart.

Example of drilling down to an investigation

Drill down on a KPI showing the number of devices with crashes over the past 1 day.

The original NQL of the KPI is:

CODE
devices
| with execution.crashes during past 1d
| summarize devices = count()

Apply the following filters to the dashboard:

  • Last hour from the timeframe picker

  • Mac from the OS filter

The Investigations page shows results using a modified NQL query:

CODE
devices during past 60min 
| where device.operating_system.platform == macOS 
| include execution.crashes during past 60min 
| where device.operating_system.platform == macOS 
| compute number_of_events_ = crash.number_of_crashes.sum() 
| where number_of_events_ != 0 
| list device.name, device.entity, device.hardware.model, device.hardware.type, device.operating_system.name

The modified query on the Investigations page includes:

  • The filter modification where device.operating_system.platform == macOS

  • The timeframe picker modification during past 60min

  • Transformation of the summarize line into the list line

The fields that the list line returns are:

  • Default fields of the root table, for example, the table that you reference in the first line of the query

  • If you do an aggregation on a particular field, it returns that specific field:
    summarize num_freezes = execution.event.number_of_freezes.sum() is transformed to
    list [default fields], execution.event.number_of_freezes

From the Investigation page, you can use the action bar on the Investigations page to perform additional operations and drill-downs.

Refer to the 'Investigate option in the action bar' section in the investigation NQL editor documentation for more information about investigation drill-downs.

Sharing a Dashboard URL

You can copy the URL of your dashboard and share it with other users. However, recipients must have Live Dashboards access to successfully open the URL.

Refer to Managing Live Dashboards documentation to learn more about sharing dashboards and grating permissions.

A dashboard URL contains:

  • Selected timeframe

  • Selected filters and their values

  • Currently selected tab

The recipients load the dashboard in the same state as you intended them to see it.


RELATED TOPICS

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.