Voronoi treemap
Overview
In a Voronoi treemap, you can see the values of the columns you add, portrayed as a tessellation of polygons whose proportions depend on a numeric column you choose. These polygons may be subdivided into smaller polygons and constitute a hierarchical structure with as many levels as those into which the data is divided (there is a legend above the chart explaining the hierarchy of data).
What data do I need for this widget?
The option to create this chart will be disabled unless your query contains at least two columns, one of them with numeric values. Furthermore, to show meaningful content on the chart, you must group your data by at least two keys using a no-time option. Also, it is highly advisable to add some aggregation functions to provide mathematical significance to the variables you want to analyze.
Time grouping
If you grouped using a time option, the diagram will only show the data for the latest period available for the time range specified.
Creating a Voronoi treemap
Here we describe how to create this chart using examples. Let's go step by step through the process with another example:
Customizing the Voronoi treemap
Other Voronoi layouts
Query example
You can recreate the example explained above with the data from the following query and mapping the fields as follows:
Query | Required field | Column added |
---|---|---|
from siem.logtrust.web.activity
group by city, responseTime
every -
select avg(responseLength) as avg_responseLength,
count() as count | Signals | city |
Value | avg_responseLength |