This chart displays three dimensions of data over an X-Y chart, where X and Y are the first 2 dimensions. The third dimension is represented by the disk, whose diameter is proportional to the value of the third parameter.
What data do I need for this widget?
The option to create this chart will be disabled unless your query contains at least three columns, one with numeric values.
Creating a bubble chart
Go to Data Search and open the required table.
Perform the required operations to get the data you want to use in the chart.
- Select Additional tools → Charts → Plots → Bubble Chart from the query toolbar.
Click and drag the column headers to the corresponding fields. This chart requires you to select three fields:
Required field Data type X-axis Any type but json Y-axis Any type but json Bubbles size float, integer, duration Partitioning (optional) string
The Partitioning field is optional and can be used to partition the bubbles into columns on the plane.
- The bubble chart is displayed.
Hover over a bubble to see the arguments and values it represents.
You can hit the following keys to perform different visualization actions:
|If your data is grouped by period, displays the data from the previous period. For example, if your query groups data every 30 seconds press the left arrow to see the data bubble for the previous 30-second period.|
|If your data is grouped by period, displays the data from the following period. For example, if your query groups data every 30 seconds press the right arrow to see the data bubble for the next 30-second period.|
|Shows/hides the list of shortcut keys.|
You can construct a simple bubble chart using the data of the following query:
from siem.logtrust.web.activity group every 15s by username, serverHost every 15s select count() as count