Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Rw ui steps macro
Rw step

Go to Data Searchsearch and open the required table.

Rw step

Perform the required operations to get the data you want to use in the chart.

Rw step

After getting the required query results, click the gear icon on the toolbar and select Charts → Diagrams → Bipartite Chord Diagramchord diagram.

Rw step

Drag the required columns to their corresponding fields. This chart requires you to select the following fields:

Required field

Description

Data type

Source

Source values of the relationships to be defined in the diagram. These values are represented in the left part of the diagram.

Any type but json

Target

Target values of the relationships to be defined in the diagram. These values are represented in the right part of the diagram.

Any type but json

Value

Choose the numeric field you want to use to define the proportion of each of the resulting connections.

float, integer, duration

Rw step

The bipartite chord diagram is displayed.

Image RemovedImage Added
Note

Affinity vs Bipartite

Even though these two diagrams look very similar, they have a major difference. While the Bipartite establishes relations between the elements of two different columns, the Affinity establishes relations between the elements of the same column.

...

Required field

Column added

Code Block
from siem.logtrust.web.activity
group every 15s by usernameuserid, serverHost
every 15s
select count() as count

Source

sourceuserid

Target

severHost

Value

count

...