Single value with trend - Why is the timeline changed when I drilldown?

[shayhibah]

Hi,

In my dashboard, I have time picker and many single value components with trend.
The query behind each single value contains span of 24 hours, and the single value is compared to "Custom" with "Auto" option.

For example:
my_query... |

 timechart span=24h count

I don't actually understand single value behavior.

1. If I choose "Last Year" in the time picker, I see the value 0 (which is correct). But when I press on it and drill down, it opens the results in "new search" with "Date time range" (9/3/18 3:00:00 AM to 9/4/18 3:00:00 AM) and not "Last Year"

2. If I choose "All time" in the time picker, I see the value 89 ; I don't know if that's correct because in the last 24 hours, I didn't ingest any event. When I press on it, it opens the results in "new search" with "Date time range" (10/9/17 3:00:00 AM to 10/10/17 3:00:00 AM) and not "All Time".

Can someone please explian to me:
1. Why the time range is changed when I drill down?
2. Why I get 89 and not 0?

Thank you

[shayhibah]

Does someone know if "All time" behaves differently than real-time and relative options?