How to get Grafana to display latest data in the graphs?

[achakraborty]

Grafana version :4.5.2 and OS : macOS

• **Purpose : Trying to collect logs from firewalls and display on the dashboard

• How are you trying to achieve it? - By running backend PERL and Python scripts

• The data that is getting displayed is for the time range 1999-2000. We need current data. I tried to change the time format to UTC everywhere. But that did not work.

• What did you expect to happen? - Data should have been displayed for any of the time ranges available for Quick range

• Can you copy/paste the configuration(s) that you are having problems with?

• Did you receive any errors in the Grafana UI or in related logs? If so, please tell us exactly what they were.

Below is the error in the UI when I select any recent time ranges

{
“root_cause”: [
{
“type”: “query_parsing_exception”,
“reason”: “Failed to parse query [platform:() AND PROCESS:() AND build:()]”,
“index”: “mpbucketcpe”,
“line”: 1,
“col”: 223
}
],
“type”: “search_phase_execution_exception”,
“reason”: “all shards failed”,
“phase”: “query”,
“grouped”: true,
“failed_shards”: [
{
“shard”: 0,
“index”: “mpbucketcpe”,
“node”: “LDQHdCi3Tme5mkzS8qGk_A”,
“reason”: {
“type”: “query_parsing_exception”,
“reason”: “Failed to parse query [platform:() AND PROCESS:() AND build:()]”,
“index”: “mpbucketcpe”,
“line”: 1,
“col”: 223,
“caused_by”: {
“type”: “parse_exception”,
“reason”: "Cannot parse ‘platform:() AND PROCESS:() AND build:()’: Encountered " ")" ") "" at line 1, column 10.\nWas expecting one of:\n …\n "+" …\n "-" …\n …\n "(" …\n "" …\n …\n …\n …\n …\n …\n "[" …\n "{" …\n …\n …\n "" …\n ",
“caused_by”: {
“type”: “parse_exception”,
“reason”: "Encountered " ")" ") "" at line 1, column 10.\nWas

[pooh]

You say “I tried to change the time format to UTC everywhere. But that did not
work.”

1. Which back-end data store are you using?

2. If your timestamps are not in UTC, what are they?

3. Can you give more detail about “that did not work”?

Antony.