Search Visualisations

Creating and using search visualisations

The VIZ search output tab allows you to visualise numeric data from search results as a line chart. Values from up to ten thousand records can be charted.

Unlike Analysis, this option allows you precise control over which values are included in the visualisation via search filters. This can be useful for removing unwanted data points.

Requirements

To render charts on the search page, your browser must support WebGL.

Creating a visualisation

Visualisations are not enabled by default on new searches. To create one, select the VIZ tab in the Output section of the Search page, and enable the toggle.

Enabling a visualisation on a new search

Basic visualisation options

Note: all the parameters you used in the underlying search will be applied to the visualisation you are building, including:

• table - the selected data source.

• Timeframe, including presets or custom Start and End date times.

• filters

At the moment, data can only be visualised in your local timezone.

Output Parameters

Rows

Much like the equivalent setting in Table, this setting limits the maximum number of records that will be included in the visualised dataset. As this tab uses a standard search, up to ten thousand records can be requested.

Date field

This setting determines which of the available Date fields in the output data are used to plot values over time. The default, event_time represents when the event was first captured by the Ardexa agent, and is available on all data.

See here for more information on common date fields used in the Ardexa Cloud.

Fields

Multiple numeric fields in the search results can be selected in this section to add them to the chart. Note that not all fields will necessarily be available on all records included in the search results, so some values may not appear in the chart.

Customization Settings

This section offers additional options to refine your visualisations.

Scrollbar

The scrollbar at the top of the chart can be hidden to provide additional space for the chart. This can be useful when taking screen captures.

Data gap handling

By default, lines will be drawn between all data points in the visualisation, in chronological order. This includes gaps in the data where there are missing records. To visualise these gaps, enable the "Don't draw a line if there are gaps in the data" toggle. The Granularity setting, explained below, will be used to determine if there is a data gap.

Minimum and Maximum values

By default, the Y-axis of the visualisation will automatically scale to include all data values. To manually control the bounds of the axis, you can optionally set minimum and/or maximum values to chart.

Granularity

This setting allows you to control the interval of the data visualised in the chart. Doing this can make high-frequency data less noisy. This setting is limited by the time intervals in the underlying search results.

A number of preset options are available. Custom granularities can also be specified, combining a Count and a Time unit. For example, selecting Count = 30, Time unit = minute will create a visualisation with 30-minute granularity.

Creating a custom 30-minute granularity