From 31a5e30984a4a59c284e1c14ad6945aa137fbb73 Mon Sep 17 00:00:00 2001
From: igor04091968 <igor04091968@gmail.com>
Date: Fri, 22 May 2026 12:06:15 +0300
Subject: [PATCH] fix(grafana): make investigation timeline load by default

---
 .../files/1c-investigation-timeline.json      | 46 ++-----------------
 1 file changed, 3 insertions(+), 43 deletions(-)

diff --git a/clickhouse-1c/grafana/provisioning/dashboards/files/1c-investigation-timeline.json b/clickhouse-1c/grafana/provisioning/dashboards/files/1c-investigation-timeline.json
index 624f8cf..958e941 100644
--- a/clickhouse-1c/grafana/provisioning/dashboards/files/1c-investigation-timeline.json
+++ b/clickhouse-1c/grafana/provisioning/dashboards/files/1c-investigation-timeline.json
@@ -33,7 +33,7 @@
           "format": 1,
           "pluginVersion": "11.2.2",
           "queryType": "table",
-          "rawSql": "SELECT ts, entity_type, entity_id, actor, source, event_type, severity, score, summary FROM analytics_1c.entity_timeline WHERE $__timeFilter(ts) AND ('${entity_type}' IN ('', '$__all') OR entity_type = '${entity_type}') AND ('${entity_id}' IN ('', '$__all') OR entity_id = '${entity_id}') ORDER BY ts DESC LIMIT 200",
+          "rawSql": "SELECT ts, entity_type, entity_id, actor, source, event_type, severity, score, summary FROM analytics_1c.entity_timeline WHERE $__timeFilter(ts) ORDER BY ts DESC LIMIT 200",
           "refId": "A"
         }
       ],
@@ -76,7 +76,7 @@
           "format": 1,
           "pluginVersion": "11.2.2",
           "queryType": "table",
-          "rawSql": "SELECT ts, rule_title, severity, score, summary FROM analytics_1c.detections WHERE $__timeFilter(ts) AND ('${entity_type}' IN ('', '$__all') OR entity_type = '${entity_type}') AND ('${entity_id}' IN ('', '$__all') OR entity_id = '${entity_id}') ORDER BY ts DESC LIMIT 100",
+          "rawSql": "SELECT ts, entity_type, entity_id, rule_title, severity, score, summary FROM analytics_1c.detections WHERE $__timeFilter(ts) ORDER BY ts DESC LIMIT 100",
           "refId": "A"
         }
       ],
@@ -313,46 +313,6 @@
           "text": "All",
           "value": "$__all"
         }
-      },
-      {
-        "name": "entity_type",
-        "label": "Entity type",
-        "type": "query",
-        "datasource": {
-          "type": "grafana-clickhouse-datasource",
-          "uid": "clickhouse-1c"
-        },
-        "refresh": 1,
-        "definition": "SELECT DISTINCT entity_type FROM analytics_1c.entity_timeline ORDER BY entity_type",
-        "query": "SELECT DISTINCT entity_type FROM analytics_1c.entity_timeline ORDER BY entity_type",
-        "multi": false,
-        "includeAll": true,
-        "sort": 1,
-        "current": {
-          "selected": false,
-          "text": "All",
-          "value": "$__all"
-        }
-      },
-      {
-        "name": "entity_id",
-        "label": "Entity id",
-        "type": "query",
-        "datasource": {
-          "type": "grafana-clickhouse-datasource",
-          "uid": "clickhouse-1c"
-        },
-        "refresh": 1,
-        "definition": "SELECT DISTINCT entity_id FROM analytics_1c.entity_timeline WHERE ('${entity_type}' IN ('', '$__all') OR entity_type = '${entity_type}') ORDER BY entity_id",
-        "query": "SELECT DISTINCT entity_id FROM analytics_1c.entity_timeline WHERE ('${entity_type}' IN ('', '$__all') OR entity_type = '${entity_type}') ORDER BY entity_id",
-        "multi": false,
-        "includeAll": true,
-        "sort": 1,
-        "current": {
-          "selected": false,
-          "text": "All",
-          "value": "$__all"
-        }
       }
     ]
   },
@@ -364,6 +324,6 @@
   "timezone": "browser",
   "title": "1C File - Investigation Timeline",
   "uid": "1c-file-investigation",
-  "version": 2,
+  "version": 3,
   "weekStart": ""
 }