Timechart View
The Timechart view turns the query on the Logs page into a chart, without leaving the page. Use it to see how a search or an aggregation changes over the selected time range, then save the chart to a dashboard.
Enable the Timechart view
The Timechart view is off by default. To show it, set this environment variable on the OpenObserve server and restart it:
| Variable | Default | Description |
|---|---|---|
ZO_TIMECHART_ENABLED | false | Shows the Timechart view on the Logs page. |
ZO_TIMECHART_ENABLED=trueThe setting applies to every organization on the server. When it is false, the Timechart button does not appear on the Logs toolbar.
Use the Timechart view
- Go to the Logs page.
- Select a stream, a time range, and write your query.
- Run the query.
- Select Timechart in the view buttons on the left of the toolbar.
The query opens in the panel editor as a chart. Choose one of these chart types: Area, Area Stacked, Bar, Horizontal Bar, Line, Scatter, or Table. Select Add To Dashboard to save the chart as a panel on a dashboard.
Without SQL mode, the view builds SQL from your search and charts the matching events over time, like the histogram. With SQL mode on, it charts the result of your SQL query, so you can plot your own aggregations. If a VRL function is applied in the Function Editor, the chart opens as a Table, because VRL functions work only with table charts.
When you share the page link while on the Timechart view, the link keeps the chart type and settings.
Requirements and limits
The Timechart button is unavailable, or the chart shows an error, when:
- More than one stream is selected and SQL mode is off. Turn on SQL mode or select a single stream.
- The query is empty.
- The editor holds more than one SQL query.
- An aggregated field has no alias. For example, write
count(*) AS totalinstead ofcount(*). - The current query has not been run yet. Run it first.
Timechart and Visualize
The Logs toolbar also has a Visualize view. Visualize opens a field-based query builder where you pick fields and aggregations to build a new chart. Timechart charts the query you already wrote.
Related links
Insights
Insights automates root cause analysis by comparing anomaly periods against baseline across dimensions, ranking which factors drive changes in logs and traces.
Quick Mode and Interesting Fields
Learn how Quick Mode and Interesting Fields speed up log searches in OpenObserve by scanning only selected fields.