Time series report
After accessing a data table and querying the required data, users can generate a time series report based on a numeric field associated with an eventdate field. The report is intended to describe the evolution of a variable through time and extract key information about it so that users can make informed decisions about the data.
Note that, as we are working with time-dependent algorithms, the step between event dates should be regular, so we strongly recommend aggregating your data before generating the report. Keep in mind that gaps in the time series will inevitably affect the precision of the report.
The report starts by analyzing the period length of the series and then performs time series decomposition. The goal is to help users define alert thresholds in order to enable anomaly detection, which can be done using the code chunks included in the report annex.
First, you must decide the time range you want to consider using the time range selector. Then, click the gear icon in the search window toolbar and select Query Info → Time Series Report (Beta).
These are the fields you must fill in to generate the report:
Select the column that contains the event dates you want to use to associate with the chosen variable. The eventdate column present in every data table is added by default, but you can select any other column containing event dates.
Select the column whose values you want to analyze. The column selected must contain numeric values (integer or float data type). In order to generate a complete report, including the annex with the code chunks to define alerts, note that the values in this field must be periodic.
Load all events
Turn on this toggle to load all the events in the selected time range. Loading all your query events is recommended to avoid unexpected results in the report.
Note that this option is the same that appears in the event loading indicator of the search window toolbar, so enabling it in one place will also enable it in the other. Learn more here.
Note that the time series report is still in beta version. If you enable the Load all events option and your query has a large amount of data, you are likely to experience performance degradation and the report may take a long time to be generated, so please proceed with caution.
After setting the required options, click Generate report. If you turn on the Load all events toggle, the option won't be available until all the events are loaded. Once the report is displayed, you can select Open in new tab to read it in a new browser tab.