Selecting Data for the Y-Axis on a Chart

Available Columns

Select the data fields from the query you want to show in the Y-axis and use the right-hand arrow to move it to the Selected Columns area. The data you select here should be the item you want to count by. For example, to show how many addresses each of your attacker zones have, you would select the attacker address.

Selected Columns

The Selected Columns area shows which data fields you have selected for the Y-axis, and provides the opportunity to change the sort order of the data.

Summary Function

You can assign a summary function to one or more columns of data. (In the “Function” row for a column, click in the column to get a drop-down menu of functions.)

• Count - Provides a count of all line-items returned by the query.

  Note: The Count function is a simple count of all events. It takes into consideration the aggregated event count and counts each event in an aggregated event individually. For example, if an event has an aggregated event count of 5, the Count function counts this event as equivalent to 5 events (with an aggregated event count of 1 each). Take this into account when comparing the number of rows in a report with the “grand total” count based on the Count function.

• Count Distinct - Provides a count of how many items are unique. For example, if there are 100 IP addresses but only 5 of them are unique, the system counts 5.

• Average - Adds the results of numeric data and divides by the number of line items.

• Sum - Adds the results of numeric data.

• Max - For numeric data, Max calculates the line item with the highest value.

• Min - For numeric data, Min calculates the line item with the lowest value.

• Median - For numeric data, Median calculates the line item with the value closest to the middle between high and low.

• Standard Deviation - For numeric data, measures the dispersion of the values in the data set (how spread out they are). If the data points are all close to the mean, then the standard deviation is close to zero. If many of the data points are far from the mean, then the standard deviation is further from zero. If all the data values are equal, then the standard deviation is zero. The Standard Deviation is the square root of the variance.

• Variance - For numeric data, measures how spread out the distribution of data is. The variance is computed as the average squared deviation of each number from its mean. The variance and the standard deviation are closely related measures of dispersion and variability.

Selecting one of these functions activates the Aggregation tab, where you can set further parameters on these functions. To set a function, select a column, and choose a function from the Summary Function drop-down menu.

Y-Axis Title

Type in a title for the Y-axis.

Label Rotation

Select a rotation angle for the by entering a digit between 0 and 90.

Labels refer to the individual Y-axis data points, which are automatically derived from the data. The Label Rotation controls the angle of these labels.

Sort by

Optionally, choose a sorting order for the data on the Y axis. You can display data alphabetically (the default), reverse alphabetical, or sort by count.

Caution: If you are plotting a Z-axis (data series) and your output is a bar chart, make sure to set your sorting on the X-axis.