Events Time Series
Using the Events Time Series Interface
The Time Series interface has the following information and affordances:
-
Filters help you to determine what requires your immediate attention. For details, see Events Filters.
To show filters, expand the filters: click the
(Show filters) icon in the top left corner of the page.
To hide the filters, click the
(Hide filters) icon in the top right corner of the filter panel.
-
The Search Events searchbar enables you to find events by any attribute value.
The searchbar works with the Query Builder.
Follow these steps to specify the first query,
:
-
In the
(Show) clause of the query, select from the drop-down either everything (default), or one of the event attributes.
-
The aggregate for everything is
(count of).
-
The aggregate for all other attributes is
(count unique of).
-
-
In the
(by) clause of the query, select from the drop-down the attribute or attributes for grouping query results.
-
In the
(limit to) clause of the query, complete these steps:
-
Use the first drop-down to specify if you want to examine the top (default) or bottom results.
-
Use the second drop-down to specify the number of results.
-
-
In the
(roll up every) clause of the query, specify the size of the time bucket for aggregating query results. + Depending on the overall interval, the drop-down shows a different automatic rollup period, and several longer options.
-
-
Overall interval. The default is Last 12 hours. Click the drop-down to use the time picker and select the appropriate time interval.
-
Refresh display: click
(Refresh) to update the display.
-
To add a query, click
(Add Query).
When you specify the first filter, you define the first query. Kloudfuse identifies it as query
(a) in the interface. You can add additional queries,
(b) and others, to your analysis.
-
View type selector enables you to specify the search view by selecting one of the following modes:
-
This article discusses this view.
-
Select the Combine all queries into one chart to combine all queries and formulas on the same graph. Deselect the option to have them appear on different (smaller) graphs.
See Combine queries and Separate queries.
-
Click the selector for the chart type, and choose one of the options from the drop-down:
-
Line has the normal, thick, and thin option.
-
Bar has the "stacked" option.
-
Area has the stacked option.
-
Points, which has no additional display options.
-
-
Click
(Create alert) to create an Event alert based on the query or queries here.
-
Click
(Export) icon to add the chart as a panel of a new or existing dashboard.
-
Click
(Explore Metric) icon to expand the chart to full size.
-
The Chart that represents the event time series of the events over the specified duration.
If you specify groupings in the by clause of the query, the chart plots the groupings that results from the first grouping item.
-
Click a component of the Chart legend to isolate and show only these values on the chart.
Combine query charts
To combine separate charts, click to select the Combine all queries into one chart option.
Separate Query Charts
When you combine 2 or more queries on the same chart, it is relatively easy to see their relationship.
However, because the two metrics often have significantly different value ranges on the Y axis, it may be difficult to see the detail. By separating the queries into their individual charts, you vertically "expand" the axis, making it easier to visualize patterns and trends.
To separate a graph into its constituent queries, click the Combine all queries into one chart option to deselect it. The interface displays the two charts side-by-side.