You can create dashboards to visualize your data in the form of various kinds of charts (such as column, line, bar, and pie charts).
The Dashboards tab allows you to add multiple charts that summarize the results of a saved search query. Saved searches are the building blocks for creating dashboards. A dashboard is made up of four equally sized quadrants called dashlets. These dashlets contain charts that summarize the results of a particular saved search query. You can add four summarization charts (dashlets) to a single dashboard.
Dashboards can help you visualize your data at a glance and detect trends in your data. You can use dashboards in various ways, for example, you can create a separate dashboard page for each application and add dashlets containing charts which provide details about various areas of the application.
Dashboards can also be shared with other users by exporting them as a part of the content pack.
Notes
This topic contains the following information.
The Default dashboard page is automatically available on the Dasboards tab, after you install the product.
This page displays the following default dashlets. These dashlets contain charts that provide valuable insights related to the product:
Dashlet name | Description |
---|---|
Total data collected | Represents the data indexed by the product over the last 24 hours. This dashlet plots a line chart which displays the sum of all the records indexed along with the total volume of data (sum of bytes) indexed in the last 24 hours. By looking at the chart, you can understand the amount of data indexed by the product and also the kind of data load handled by the product. Example: If you see a sudden dip in the record count on a particular day, it might indicate that some data collectors or the Collection Stations (or Collection Agents) are not working. The information represented on this dashlet can also provide an insight about the amount of data generated by the applications that you are monitoring. In this chart, the following apply:
By default, the legend is hidden. To show legend, select the Show Legend check box. For more information, see Monitoring the product metric files. |
Top 5 data collectors by volume | Provides a glimpse of the top five data collectors that are collecting the maximum volume of data compared to other data collectors present in the system. This information can help you understand the distribution of data load across data collectors. |
Total collection polls with "no data" | Provides a glimpse of the total number of polls with no data collected. This information can help you monitor if the data collection is successful or not. Polls with no data can occur in the following two scenarios:
You can navigate to the Administration > Data Collectors page to find out data collectors with the status showing red. For more information, see Data collection status. You can also correlate this dashlet with the dashlet indicating the top five data collectors with no data polled. Also, you can see the troubleshooting scenarios with respect to data collection listed at Troubleshooting common issues. |
Top 5 data collectors with "no data" polls | Provides a glimpse of the top five data collectors with no data polled. These data collectors indicate data collectors with the maximum number of polls with no data. You can correlate this dashlet with the dashlet indicating the total number of collection polls with no data collected. This dashlet can give you insights into the problem data collectors which are no polling data successfully. You can see the troubleshooting scenarios with respect to data collection listed at Troubleshooting common issues. |
A dashlet is one of the four quadrants that appear on a dashboard page. You can add dashlets to see a graphic representation of the saved search results for data monitoring purposes. The graphical representation is available in the form of various charts. For example, bar diagram pie chart, line chart, and so on.
By default, a dashlet provides details about search results displayed on the Search tab within one minute.
To change this time limit, you can add the indexing.psJobGetMoreTimeoutInmsec
property by navigating to the searchserviceCustomConfig.properties file. This property defines the time limit (in milliseconds) after which the search (including notifications and views) times out. For more information, see Modifying the configuration files.
Note
If your saved search string includes a search command that provides tabular outputs (for example, the timechart command), the option to represent the search results in the form of a chart is unavailable.
For more information about tabular commands, see Search commands.
You can add a dashlet by using the Dashboards tab or by using the Saved Searches tab.
The following instructions describe the procedure for adding a dashboard and dashlets and the various actions available while adding or editing dashlets.
You can add a dashboard from the Dashboads page. Alternatively, you can also add a dashboard from the Saved Searches tab. For more information, see Adding a dashlet from the Saved Searches tab.
You can add a dashlet by navigating to an existing dashboard page or by adding a new dashboard page first.
Chart Type: Select one of the following chart types to summarize your search results:
Chart type | Preview |
---|---|
Bar | |
Column | |
Doughnut | |
Line | |
Pie |
Select the saved search that you want to add to the dashboard page, and click Add to Dashboard
.Note
You cannot add a saved search to a dashboard in the following scenarios:
by
parameter. Creating a dashlet for such a query does not provide meaningful representation of data.* | stats count(HOST)
However, you can use a saved search shared by another user for creating a dashboard after cloning the saved search.
Chart Type: Select one of the following chart types to summarize your search results:
Chart type | Preview |
---|---|
Bar | |
Column | |
Doughnut | |
Line | |
Pie |
Note
The pie and doughnut charts are not supported for saved searches that return tabular output. For example, timechart command.
For more information about saved searches, see Managing saved searches.
The following table lists the various actions that you can perform on dashboards and dashlets available under the Dashboards tab:
Action | Description |
---|---|
Dashboards | |
Add a dashboard | Click the Add new dashboard | icon next to the Default dashboard page.
Reload all dashlets in a dashboard | Navigate to a dashboard page and click Reload all dashlets at the top of the page. |
Rename a dashboard | Navigate to a dashboard page, click Rename dashboard at the top of the page, provide the new dashboard name, and click Update. Note: If you rename the Default dashboard page, then while setting the product landing page on the Settings > User Settings page, the new name is populated. |
Delete a dashboard | Navigate to a dashboard page, click Delete dashboard at the top of the page, and click Yes to confirm the action. Note: If you delete the Default dashboard page, then even if the product landing page was set to the Default dashboard page, the Search page is set as the new landing page. |
Dashlets in an existing dashboard | |
Reload a dashlet | Navigate to a dashboard page, and on a dashlet, click Reload Dashlet | to refresh the data displayed on the summarization chart.
Edit a dashlet | Navigate to a dashboard page, on a dashlet, click Edit Dashlet to edit one or more of the following details related to that dashlet, and then click Update:
|
Delete a dashlet | Navigate to a dashboard page, and on a dashlet, click Delete Dashlet | to delete that dashlet from the current dashboard page.
| Navigate to a dashboard page, and on a dashlet, click the time range list, and then select one of the following options:
The dashlet execution details (starting and ending date and time) are displayed next to the time range list. |
Show or clear legends | By default, dashlets based on a tabular command search query, provide legends next to the graph. By default, the legend is hidden. To show legend, select the Show Legend check box. |
Run a search | Navigate to a dashboard page, and on a dashlet, click one of the portions of the chart to run the saved search query associated with the dashlet. |
By default the Default dashboard page is set as the landing page when you log on to the product. You can change the landing page to show another existing dashboard page.
To do this, navigate to Settings > User Settings, and select the correct option available in the Landing Page list.