Search Visualisations
Creating and using search visualisations
Last updated
Creating and using search visualisations
Last updated
The VIZ search output tab allows you to visualise numeric data from search results as a line chart. Values from up to ten thousand records can be charted.
Unlike Analysis, this option allows you precise control over which values are included in the visualisation via search filters. This can be useful for removing unwanted data points.
Visualisations are not enabled by default on new searches. To create one, select the VIZ tab in the Output section of the Search page, and enable the toggle.
Note: all the parameters you used in the underlying search will be applied to the visualisation you are building, including:
table - the selected data source.
Timeframe, including presets or custom Start and End date times.
filters
At the moment, data can only be visualised in your local timezone.
Much like the equivalent setting in Table, this setting limits the maximum number of records that will be included in the visualised dataset. As this tab uses a standard search, up to ten thousand records can be requested.
This setting determines which of the available Date fields in the output data are used to plot values over time. The default, event_time represents when the event was first captured by the Ardexa agent, and is available on all data.
See here for more information on common date fields used in the Ardexa Cloud.
Multiple numeric fields in the search results can be selected in this section to add them to the chart. Note that not all fields will necessarily be available on all records included in the search results, so some values may not appear in the chart.
This section offers additional options to refine your visualisations.
The scrollbar at the top of the chart can be hidden to provide additional space for the chart. This can be useful when taking screen captures.
By default, lines will be drawn between all data points in the visualisation, in chronological order. This includes gaps in the data where there are missing records. To visualise these gaps, enable the "Don't draw a line if there are gaps in the data" toggle. The Granularity setting, explained below, will be used to determine if there is a data gap.
By default, the Y-axis of the visualisation will automatically scale to include all data values. To manually control the bounds of the axis, you can optionally set minimum and/or maximum values to chart.
This setting allows you to control the interval of the data visualised in the chart. Doing this can make high-frequency data less noisy. This setting is limited by the time intervals in the underlying search results.
A number of preset options are available. Custom granularities can also be specified, combining a Count and a Time unit. For example, selecting Count = 30, Time unit = minute will create a visualisation with 30-minute granularity.
