Investigation Dashboard for data

The investigation dashboard is a preset group of charts and a table that help you understand what is happening in your system at any given time, and upon which you can build your own customized dashboards.

There are four default views for data activity monitoring, each with different charts and tables. Select the view from the dashboard menu Navigation. The default views cannot be modified.

The default dashboards contain data for the last hour presented in one or more of:
  • Trimetric charts (3–axis data graphs). The default view is a color map. Additional views are bar graph, bubble graph, line graph, pie graph, step graph, and area graph.
  • Results table: provides the search results and investigation features of the original quick search. The Results Table is always at the bottom of the dashboard. It can be added to any dashboard. Tabs are:
    • Activity: Summary and Details tabs. Each row in the Summary tab gives the number of instances of recorded activities per server–DB pair and the number of DB types. The Detailed Summary adds the count of Source Programs, DB users, OS users, Client hostname, Client IP, and date. Each row in the Details tab gives full details on one activity.
    • Outliers Summary and Details tabs: see Interpreting data outliers in the investigation dashboard.
    • Errors Summary and Details tabs: Summary and Details tabs. Each row in the Summary tab gives the number of instances of reported errors per server and the number of DB types and DB users. The Detailed Summary adds the number of Client IPS, error types and dates. Each row in the Details tab gives full details on one error.
    • Violations Summary and Details tabs. Each row in the Summary tab gives the number of instances of recorded violations per server–DB pair and the number of DB types. The Detailed Summary adds the count of Source Programs, DB users, OS users, Client hostname, Client IP, severity, violation, and date. Each row in the Details tab gives full details on one violation.
Additional views that you can add or open are:
  • Topology viewTopology view iconSearch server status view: see Using the topology view
  • Animated bubble chart: an animated visualization of data changes over the last 48 hours. The chart depicts the behavior of objects over a period of 24 hours. Each object is depicted as a circle, and its area and position (x and y axis) represent three user-selected variables. The animation represents the object's behavior over the 24 hours. Access from the Add Chart drop-down.
  • Activity chart: a line chart that displays the volume of activity and outliers, located above the Results table. Access from the Add Chart drop-down.
  • Data in-sight: 3D visualization of data activity, see Using Data In-Sight. Access from the Add Chart drop-down.
Controls and options on this page:
  • A categorized facet list of Where, Who, What, Exception, and When, from the search results appears on the left side of every dashboard and cannot be removed. Filter the entire dashboard by the specific facets by expanding the list and clicking individual facets.
  • The Active Filters row at the top of the window shows the current filters. Delete filters by clicking the X.
  • Big Data Intelligence only: Select Guardium System or GBDI - Guardium Big Data Intelligence.
  • Search field: free text search that filters the results in all fields simultaneously, irrespective of facet
  • Distributed search icon Distributed search: see Local and distributed search
  • Time period for which data is presented: modify by clicking the drop-down in the upper right corner. Options are last 1 hour, last 3 hours, last 1 day, last 3 days, any time period you specify. Default is one hour. If you select GBDI - Guardium Big Data Intelligence, the time period options are last 1 day, last 3 days, last 1 week, last 3 weeks, any time period you specify. The time period includes a time zone setting, by default the current Guardium system’s time zone. Data is reported according to this time zone.
  • Filters drop-down: see Filtering data and saving filters in the investigation dashboard
  • add new dashboard save changes in dashboard save dashboard as: see Creating, saving, and exporting investigation dashboards