Support parametrized search query in dashboard tiles
Have ability to save search query that accept parameter, like
"All Accounts log in to Computer X" where X will be provided later
The idea is that you would have a ‘saved search’ with a token that can be replaced, and the value is part of the tile configuration?
I have a query now that brings up certain groups of records, and another query that takes the ID that identifies that group and shows details about each record within that group. Right now I have to type the ID into that query to make it work.
It would be SO NICE if I could have a dashboard with both queries, and selecting a row in the first query would feed its first column as a parameter to the second query, which would update based on that.
The idea is that you would have a 'saved search' with a token that can be replaced, and the value is part of the tile configuration?
I see it's nice to have a query as 'template' - but the complexity might be actually 'saving' such a 'saved search' - since it won't execute anywhere but in a tile... you can't even 'save' it in search page... so you would have to embed the in the tile as well and not referencing a 'saved search': which kind of defeats the point...
Or, say that you were able to save such a query, what would happen when you try to run in in the default search page? do you get prompted for the value?
We think this is all very complicated - a more generic approach could be using subsearches http://feedback.azure.com/forums/267889-azure-operational-insights/suggestions/6519234-filter-groups-of-computers-thru-subqueries-in-n
when that is in place, I can see how you can use a 'saved search' as the 'inner query' for ANOTHER 'saved search'. That is more what we had in mind at this point from a language and search experience evolution...