I was able to build a large dashboard with 10+ panels using the loadjob command spanning the last day of any triggered results. However, I am now looking to built the same dashboard where each panel will span a week (7-days) of any triggered results.
Loadjob was the only command that minimized loading of each panel. Is there anyway to use loadjob, or a similar command, that shows a timechart spanning 7-days?
| loadjob savedsearch=tech123:Residential:"name of enabled alert" artifact_offset=0 | timechart span=1d count by incident_type
But I've tried using earliest=-7d in every possible spot and I've used the time picker, but I haven't found a resolution yet... any thoughts or ideas or solutions?