Graphical correlation
Overview
The graphical correlation options enable you to create tables and charts by joining two or more existing queries based on a common field. This allows you to enrich query and graph data with information from multiple data tables.
There are four graphical correlation options:
Create cross-search charts
The queries must be open and they must contain fields with shared values for a join to be possible. You can access the correlation charts by clicking Additional tools (the gear icon) and then selecting Graphical correlation from the query window toolbar.
The chart window opens. Add the necessary columns from the query table and the diagram will be automatically constructed.
Cross-search charts, like regular charts, always reflect the data of the current queries as shown on the search window. You can change the time range or perform any operation without closing the diagram and if it affects the columns used to construct it, the content will change. This might be helpful when the columns used are adequate but the data displayed does not satisfy your needs so you want to change it without constructing the diagram again.
Save cross-search charts
Some of the cross-search charts can be saved to be later accessed for further analysis. It is the case of the Cross-search Graph Diagram and the Cross-search Line Chart. You can access them going to Data Search and selecting the My Cross-Search Charts tab at the bottom, next to the My Favorite Queries tab.
The saved charts are displayed as thumbnails but you can also display them as a list selecting the Table icon in the Mode section. If you cannot find the one you are looking for, you can use the search box.
Select its thumbnail to open it on the query window. To delete a chart, click the X icon next to it.
The server icons next to the graph name (or under the Searches column in the Table view) indicate the number of queries used in the correlation. Hover over each of them to see the name of the data table.