XpoSearch enables you to define what your graph looks like, as well as its contents, using the icons on the Graph Toolbar.
Defining Graph Display
You have the option of displaying your graph as a bar graph (the default) or a line graph. In the bar graph, a bar appears at each point in time where events were found to match your search query. The height of each bar is according to the number of events that occurred at the specific time. A bar does not appear at times when no events matching your search query occurred. A line graph shows how the number of events matching the search query changed from one point in time to the next.
To display your graph as a bar graph:
- In the Graph Toolbar, click the Bar Graph icon.
To display your graph as a line graph:
- In the Graph Toolbar, click the Line Graph icon.
Defining Graph Contents
You have the option of displaying your graph in a split view or summary view. In the split view, the number of bars or lines in a timeslot is equivalent to the number of logs that were the source of events in that timeslot; each bar or line represents the number of events in a single log source of events. In the summary view, a single bar or line represents all events from all log sources.
To display your graph in split view:
- In the Graph Toolbar, click the Split View icon.
To display your graph in summary view:
- In the Graph Toolbar, click the Summary View icon.