In this graph, the discs are used to represent values over time for a set of parameters. The size of each disc is proportional to its value.
What data do I need for this widget?
The option to create this chart will be disabled unless your query contains at least two columns, one of them with numeric values.
Creating a punch card
Go to Data Search and open the required table.
Perform the required operations to get the data you want to use in the chart.
- Select Additional tools → Charts → Diagrams → Punch Card from the query toolbar.
Click and drag the column headers to the corresponding fields. This chart requires you to select three fields:
Required field Data type Partitioning Any type but json Value float, integer, duration Grouping colors (optional) Any type but json
- The punch card is displayed.
Hover over a point on the chart to see its value.
Click on Global size to show a size that corresponds to the overall of the results instead of the period shown.
You can create a card using the data of the following query:
from siem.logtrust.web.activity where isnotnull(srcHost) group every 30m by srcHost every 1d select count() as count