Analytics returns a Problems Graph that shows the distribution of problems over time. You can determine the display mode and contents of the graph. The graph has drilldown functionality, enabling you to zoom into the entire graph or into any timeslot, and run Analytics on the new time period or timeslot. It also enables you to hover over a measurement point to see the source of problems and drill down to see the exact problems in any log. You can also view the previous or next timeslot.    

Defining the Graph

XpoSearch enables you to define what your graph looks like, as well as its contents, using the icons on the Graph Toolbar.

Defining Graph Display

You have the option of displaying your graph as a bar graph (the default) or a line graph. In the bar graph, a bar appears at each point in time where events were found to match your search query. The height of each bar is according to the number of events that occurred at the specific time. A bar does not appear at times when no events matching your search query occurred. A line graph shows how the number of events matching the search query changed from one point in time to the next.

To display your graph as a bar graph:

• In the Graph Toolbar, click the Bar Graph icon.

To display your graph as a line graph:

• In the Graph Toolbar, click the Line Graph icon.

Defining Graph Contents

You have the option of displaying your graph in a split view or summary view. In the split view, the number of bars or lines in a timeslot is equivalent to the number of logs that were the source of events in that timeslot; each bar or line represents the number of events in a single log source of events. In the summary view, a single bar or line represents all events from all log sources.

To display your graph in split view:

• In the Graph Toolbar, click the Split View icon.

To display your graph in summary view:

• In the Graph Toolbar, click the Summary View icon.