Configuring Charts
You can configure Log Activity, Network Activity, and Connections, if applicable, dashboard items to specify the chart type and how many data objects you want to view.
Table 1: Configuring Charts
Option | Description |
|---|---|
Value to Graph | From the list box, select the object type that you want to graph on the chart. Options include all normalized and custom event or flow parameters included in your search parameters. |
Chart Type | From the list box, select the chart type that you want to view. Options include:
|
Display Top | From the list box, select the number of objects you want to view in the chart. Options include 5 and 10. The default is 10. |
Capture Time Series Data | Select this check box to enable time series capture. When you select this check box, the chart feature begins to accumulate data for time series charts. By default, this option is disabled. |
Time Range | From the list box, select the time range that you want to view. |
Your custom chart configurations are retained, so that they are displayed as configured each time that you access the Dashboard tab.
Data is accumulates so that when you perform a time series saved search, there is a cache of event or flows data available to display the data for the previous time period. Accumulated parameters are indicated by an asterisk (*) in the Value to Graph list box. If you select a value to graph that is not accumulated (no asterisk), time series data is not available.
- Click the Dashboard tab.
- From the Show Dashboard list box, select the dashboard that contains the item you want to customize.
- On the header of the dashboard item you want to configure, click the Settings icon.
- Configure the chart parameters.