Document toolboxDocument toolbox

Bipartite chord diagram

This chart displays the interrelationships between data through time. The data is arranged radially around a circle with the relationships between the different distinct values (represented as segments in the circle) drawn as arcs connecting the data together. Each arc is assigned a value that represents its proportion. 

What data do I need for this widget?

The option to create this chart will be disabled unless your query contains at least three columns, one of them with numeric values. Furthermore, it is advisable to group your data and aggregate it in order to show meaningful content on the diagram.

Creating a bipartite chord diagram

  1. Go to Data Search and open the required table.

  2. Perform the required operations to get the data you want to use in the chart.

  3. After getting the required query results, click the gear icon on the toolbar and select Charts → Diagrams → Bipartite Chord Diagram.

  4. Drag the required columns to their corresponding fields. This chart requires you to select the following fields:

    Required fieldDescriptionData type
    SourceSource values of the relationships to be defined in the diagram. These values are represented in the left part of the diagram.Any type but json
    TargetTarget values of the relationships to be defined in the diagram. These values are represented in the right part of the diagram.Any type but json
    ValueChoose the numeric field you want to use to define the proportion of each of the resulting connections.float, integer, duration
  5. The bipartite chord diagram is displayed.

   

Affinity vs Bipartite

Even though these two diagrams look very similar, they have a major difference. While the Bipartite establishes relations between the elements of two different columns, the Affinity establishes relations between the elements of the same column.

Working with bipartite chord diagrams

Hover over a segment in the circle to see its total number of values and highlight its relationships with other values.

Hover over an arc to see the number of values in that connection and highlight the arcs going to the same target value.

You can hit the following keys to perform different visualization actions:

Shortcut keysDescription

D

Shows/hides a legend displaying the total amount of source values and the count of each distinct source value in the chart. Hover over each section in the diagram to display the count of instances in each relationship of that value.

L

Shows/hides the labels indicating the names of each distinct value.

S

Converts the source data to target data and vice versa.

H

Shows a histogram representing the amount of data and percentage of the selected value in the chart through the selected time period. Hover over the histogram to see the count and percentage for each period.

Displays data from the previous period. For example, if your query groups data every 30 seconds press the left arrow to see the data relationships in the previous 30-second period.

Displays data from the next period. For example, if your query groups data every 30 seconds press the right arrow to see the data relationships in the following 30-second period.

?

Shows/hides the list of shortcut keys.

Query example

You can recreate the example shown in the picture above with the data from the following query and mapping the fields as follows:

from demo.ecommerce.data
group every 30s by method, statusCode, bytesTransferred
every 30s
Required fieldColumn added
Sourcemethod
TargetstatusCode
ValuebytesTransferred

In case you want another example, here is another query to construct another bipartite chord diagram:

from siem.logtrust.web.activity
group every 15s by username, serverHost
every 15s
select count() as count
Required fieldColumn added
Sourcesource
TargetseverHost
Valuecount