Attachments

doc/3.2.1/Working With Portal/Investigation Time Serie Widget

1. Investigation Time Serie Widget

1.1. Purpose

The purpose of the Investigation Time Serie widget is two-fold (one can choose do to one of them or both):

  • Compute and display a metric based on the output of an investigation
  • Display a table with the top N objects returned by an investigation

In this widget, results are computed and stored day by day. A full history is therefore available.

1.2. Creating widget

1.2.1. Step 1

  1. paste an investigation
  2. select the Engines to take into account


    its_config_1.png

1.2.2. Step 2

  1. define the metric
    1. choose the operator to compute the metric
    2. select the field
    3. optionally specify if the metric can be computed across Engines
  2. define the table
    1. select how many objects to be considered in the table
    2. choose the selection criterion (e.g., most used)
    3. select the attributes of the object to be displayed in the table
  3. optionally select a criterion for grouping results ("group by"); it can be any category on any object type. You can also choose if you want to automatically hide groups that have a metric always equal to zero.


    its_config_2.png

1.3. Using widget

This widget offers many different cases according to what is defined. Here are a few examples:

  • its_0.png

  • its_1.png

  • its_2.png

  • By default the last 60 days are displayed. But one can go back in time (or return in the future) using icons to the left and the right of the chart.


    its_3.png