Bipartite chord diagram
This chart displays the interrelationships between data through time. The data is arranged radially around a circle with the relationships between the different distinct values (represented as segments in the circle) drawn as arcs connecting the data together. Each arc is assigned a value that represents its proportion.
What data do I need for this widget?
Even though it is not necessary in order to create the diagram, your query must group events to show meaningful data. It is necessary though to have at least one numeric field to assign the proportions of each relationship.
Creating a bipartite chord diagram
Go to Data Search and open the required table.
Perform the required operations to get the data you want to use in the chart.
You must group your data to have suitable data for the diagram.
After getting the required query results, go to Additional tools → Charts → Diagrams → Bipartite Chord Diagram.
Drag the required columns to their corresponding fields. This chart requires you to select the following fields:
Required field Description Data type Source Source values of the relationships to be defined in the diagram. These values are represented in the left part of the diagram. Any type but json Target Target values of the relationships to be defined in the diagram. These values are represented in the right part of the diagram. Any type but json Value Choose the numeric field you want to use to define the proportion of each of the resulting connections. float, integer, duration The bipartite chord diagram is displayed.
Affinity vs Bipartite
Even though these two diagrams look very similar, they have a major difference. While the Bipartite establishes relations between the elements of two different columns, the Affinity establishes relations between the elements of the same column.
Tips
Hover over a segment in the circle to see its total number of values and highlight its relationships with other values.
Hover over an arc to see the number of values in that connection and highlight the arcs going to the same target value.
Shortcut keys
You can hit the following keys to perform different visualization actions:
| Shortcut keys | Description |
|---|---|
D | Shows/hides a legend displaying the total amount of source values and the count of each distinct source value in the chart. Hover over each section in the diagram to display the count of instances in each relationship of that value. |
L | Shows/hides the labels indicating the names of each distinct value. |
S | Converts the source data to target data and vice versa. |
H | Shows a histogram representing the amount of data and percentage of the selected value in the chart through the selected time period. Hover over the histogram to see the count and percentage for each period. |
← | Displays data from the previous period. For example, if your query groups data every 30 seconds press the left arrow to see the data relationships in the previous 30-second period. |
→ | Displays data from the next period. For example, if your query groups data every 30 seconds press the right arrow to see the data relationships in the following 30-second period. |
? | Shows/hides the list of shortcut keys. |
Query example
This is the source query used to generate the above diagram:
from demo.ecommerce.data
group every 30s by method, statusCode, bytesTransferred
every 30sAnd these are the columns added to the required fields:
| Required field | Column added |
|---|---|
| Source | method |
| Target | statusCode |
| Value | bytesTransferred |
Here is another query to get data to construct a simpler bipartite chord diagram:
from siem.logtrust.web.activity
group every 15s by username, serverHost
every 15s
select count() as count