Edit Panel

Overview

Editing visualizations involves changing search query parameters, selecting the type of visualization, customizing the appearance, and defining how items behave in a graph or other type of data representation.

This process involves:

• analyzing and adjusting queries to display the right information
• Selecting the most appropriate type of visualization (e.g., graphs, charts, metrics, etc.)
• adjusting appearance parameters (such as colors, scaling, etc.)
• managing user interaction with the visualization (e.g. the ability to zoom, selecting parameters for display, etc.).

All these steps are aimed at creating an informative, clear and easy-to-use data visualization.

Visualization panel editing tools

Visualizations can be edited in the editor of the monitoring panel or on the Search page. The following visualization components can be configured anywhere:

Icon	Component	Description
	Search query	The search query editor is needed to modify the query, the result of which will be displayed on the visualization
	Visualization type	The visualization type selection tool allows you to select the desired visualization type
	Visualization settings	The appearance and behavior editor allows you to control the visualization, the way it looks and the way it reacts to user actions

These components can be found in the dashboard editor in the upper right corner of each panel, or on the Search page if the visualization is built from it.

Visualization editing workflow

Editing visualization in Search Anywhere Framework is possible on the dashboard page or on the Search page.

Edit visualization on the Dashboard page

To edit a visualization on a dashboard page:

1. Go to the dashboard page and click Edit to go to the dashboard editor

2. In the upper right corner of the dashboard for which you want to make changes, select the desired editing component

   

   Component	Interface
   Search query
   Visualization type
   Visualization settings

3. Make the required changes

4. Press Save to save the changes made or Cancel to cancel.

Edit visualization on the Search page

To edit the visualization on the Search page:

1. Go to the Search page by the path Navigation menu - Core - Search.
2. Enter the query that will return the visualization or statistics

As an example, we will use a query with the command timeaggs

source windows_events
| timeaggs count by event.code

returning the result in the Visualization tab

The arrangement of components here is different from the dashboard editor. The query in the Search line is a search query for visualization. And the editing tools of the visualization panel are located on the left side of the interface.

Component	Interface
Search query
Visualization type
Visualization settings

3. Make the required changes
4. (Optional) Click the Add to Dashboard button to save the visualization

Additional information

• Dashboard creating
• Visualizations