Availability timeline

Overview

This chart displays availability over time. It is commonly used to show equipment availability over time, but it can also be used to show other types of information, such as system load or memory usage.

What data do I need for this widget?

The option to create this chart will be disabled unless your query contains at least two columns, one of them with numeric values. Furthermore, it is advisable to group your data and aggregate it in order to show meaningful content on the diagram.

Creating an availability timeline

1. Go to Data Search and open the required table.

2. Perform the required operations to get the data you want to use in the chart.
   

3. After getting the required query results, click the gear icon on the toolbar and select Charts → Plots → Availability timeline.

4. Drag the required columns to their corresponding fields. This chart requires you to select the following fields:

   Required field	Description	Data type
   Partitioning	Field with the criteria whose availability you want to know.	Any type but json
   Value	Numeric field to define the magnitude of the availability in each of the resulting segments of time.	float, integer, duration

5. The availability timeline plot is displayed.
   
   

Working with availability timelines

Hover over a segment to see its status icon, extended time range description and value.

Query example

You can recreate the example shown in the picture above with the data from the following query and mapping the fields as follows:

from siem.logtrust.web.activity
  group every 15m by city
  every 15m
  select count() as count