Graylog2 / Graylog2/graylog2-server
Warn when interval in aggregation builder might cause issues with search time range
- Dominant language
- Java
- Stars
- 8.1k
- Forks
- 1.1k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 217
Description
## What?
The aggregation builder should display a warning when the selected interval is likely to cause issues with the current search time range.
For example, a user should be warned if:
* The aggregation interval is 1 second and the search time range is 90 days, as it's likely unintentional and may result in UI and/or backend performance issues.
* The aggregation interval is 1 day and the search time range is 10 seconds, as the visualization might not display correctly (e.g. bar charts don't show a bar-- maybe a bug).
## Why?
Sometimes users unintentionally have a large time range and small aggregation interval, which puts extra load on ES and (if the search completes) can essentially lock up the UI when it tries to render the visualization.
Having a clear warning of the potential issue would help prevent unintentionally bad activity.
## Your Environment
* Graylog Version: 4.3.2
Contributor guide
Assessment
This issue has not been assessed yet.