You can configure different dashboard chart types for presenting your organization's data
in meaningful ways.
Alternatively, use the IBM
QRadar Pulse dashboard app to
communicate insights and analysis about your network. Visualize offenses, network data, threats,
malicious user behavior, and cloud environments from around the world in geographical maps, a
built-in 3D threat globe, and auto updating charts. For more information, see QRadar Pulse app
(https://www.ibm.com/support/knowledgecenter/SS42VS_latest/com.ibm/Pulseapp.doc/c_Qapps_PulseDashboard_intro.html).
Procedure
-
Click the Dashboard tab.
-
From the Show Dashboard list box, select the dashboard that contains the
item you want to customize.
-
On the header of the dashboard item you want to configure, click the
Settings icon.
-
Configure the chart parameters.
- From the Value to Graph list box, select the object type that
you want to graph on the chart. Options include all normalized and custom event or flow parameters that are included in your search
parameters.
- Select a chart type:
- Bar, pie, and table charts are only available for grouped events or flows.
- Data accumulates so that when you run a time series saved search, a cache of event or flows data is available to display the data for the previous
time period. Accumulated parameters are indicated by an asterisk (*) in the Value to
Graph list box. If you select a value to graph that is not accumulated (no asterisk),
time series data is not available.
Select the Capture Time Series Data
checkbox to enable time series capture. When you select this checkbox, the chart feature accumulates
data for time series charts. By default, this option is disabled.
Results
Your custom chart configurations are retained so that they are displayed as configured each time
that you access the Dashboard tab.