Using Charts

The Console offers several chart view options for active channels and for data monitors. You can add chart views of the data in many active channels or data monitors simply by choosing a chart type from the Format pop-up menu in the view's lower-right corner.

ArcSight charts remain linked to the data they represent. You can immediately see a chart's events in a grid view that presents the data as charted, or filtered further using the options of the Analyze in Channel command. Charts use the same color for all values in a series. For example, if you are plotting successful and failed logins in a chart, successful logins as a series will have one color. Failed logins as another series will have a different color.

You can click and drag three-dimensional charts on their vertical or horizontal axes to tilt them for better viewing.

Note: Contents of charts are affected by the factors that affect active channels or data monitors, such as changing time parameters or filters. Not all charts are applicable to, or available for, all views.

Related topics: