SlideShare a Scribd company logo
|     |                                                                                            Logged in as Username | Logout | Admin | Jobs (3)             | Help

Dashboards |       | Search |       | Reports |    | Visualizations |       |                                                                                 Application Settings




    Reports                                                                                                                                        how do I create a new report?


        Name                                       # Instances   Interval       Run on               Results Start        Results End          More...   Actions

         Events by time                                   12     Daily          01/04/08 0:00 0:00   01/04/08 0:00 0:00   01/05/08 0:00 0:00               Edit    Run

         Ports by firewall                               167     Monthly        01/04/08 0:00 0:00   01/04/08 0:00 0:00   01/05/08 0:00 0:00

         Application Configuration Change Report           1     Weekly         01/04/08 0:00 0:00   01/04/08 0:00 0:00   01/05/08 0:00 0:00

         Pie chart                                         1                    01/04/08 0:00 0:00   01/04/08 0:00 0:00   01/05/08 0:00 0:00

         Another report                                    3     Yearly         01/04/08 0:00 0:00   01/04/08 0:00 0:00   01/05/08 0:00 0:00

         Server Load Distribution                          1                    01/04/08 0:00 0:00   01/04/08 0:00 0:00   01/05/08 0:00 0:00

         Application Management Change Report              1                    01/04/08 0:00 0:00   01/04/08 0:00 0:00   01/05/08 0:00 0:00

         Events by host                                   12                    01/04/08 0:00 0:00   01/04/08 0:00 0:00   01/05/08 0:00 0:00



        Selected items:      Delete Report
|     |                                                                                     how do I createin as Username | Logout | Admin | Jobs (3)
                                                                                                           Logged a new report?                                                  | Help
                                                                                                      • start a new search and choose option to report on results, OR Application Settings
Dashboards |       | Search |       | Reports |    | Visualizations |       |
                                                                                                      • run a saved search and choose option to report on results, OR
                                                                                                      • choose a completed search job / artifact and choose option to report on results


    Reports                                                                                                                                              how do I create a new report?


        Name                                       # Instances   Interval       Run on               Results Start        Results End               More...     Actions

         Events by time                                   12     Daily          01/04/08 0:00 0:00   01/04/08 0:00 0:00    01/05/08 0:00 0:00                     Edit    Run

         Ports by firewall                               167     Monthly        01/04/08 0:00 0:00   01/04/08 0:00 0:00    01/05/08 0:00 0:00

         Application Configuration Change Report           1     Weekly         01/04/08 0:00 0:00   01/04/08 0:00 0:00    01/05/08 0:00 0:00

         Pie chart                                         1                    01/04/08 0:00 0:00   01/04/08 0:00 0:00    01/05/08 0:00 0:00

         Another report                                    3     Yearly         01/04/08 0:00 0:00   01/04/08 0:00 0:00    01/05/08 0:00 0:00

         Server Load Distribution                          1                    01/04/08 0:00 0:00   01/04/08 0:00 0:00    01/05/08 0:00 0:00
                                                                                                                                                    Report Type
                                                                                01/04/08 0:00 0:00   01/04/08 0:00 0:00    01/05/08 0:00 0:00       Custom/Advanced
         Application Management Change Report              1

                                                                                                     01/04/08 0:00 0:00    01/05/08 0:00 0:00       Run Time              # Events
         Events by host                                   12                    01/04/08 0:00 0:00
                                                                                                                                                    1:32:04               5, 000. 948

                                                                                                                                                    Preview
        Selected items:      Delete Report
|    |                                                                                                           Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |         | Search |       | Reports |           | Visualizations |      |                                                                                 Application Settings


Reports > Report Details

Ports by Firewall        [ Edit report | Edit report properties | Delete report ]            Instance storage policy...

 Report Type                                   Date Range                Interval
 Trend over time, split series                 Week to date              None (if schedule, settings and next run time)


  Report Instances (154)                                                                                       Run Report

        Results Start         Results End                    Run Start                  Run by             # Events

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Mike Smith             154

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Mike Smith             124

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Mike Smith             54

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Jack Blaney            154

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Joe Shmoe              154

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Dick Van Dyke          124

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Dyke Van Dick          54

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Mike Smith             154


       Selected items:       Delete Instance




   Created by Mike Smith on March 1, 2008
   Version history
|    |                                                                                                           Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |         | Search |       | Reports |           | Visualizations |      |                                                                                 Application Settings


Reports > Report Details

Ports by Firewall        [ Edit report | Edit report properties | Delete report ]            Instance storage policy...

 Report Type                                   Date Range                Interval
 Trend over time, split series                 Week to date              None (if schedule, settings and next run time)


  Report Instances (154)                                                                                       Run Report

        Results Start         Results End                    Run Start                  Run by             # Events

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Mike Smith             154

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Mike Smith             124

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Mike Smith             54

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Jack Blaney            154

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Joe Shmoe              154

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Dick Van Dyke          124

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Dyke Van Dick          54

        01/04/08 0:00 0:00     01/05/08 0:00 0:00            01/04/08 0:00 0:00         Mike Smith             154


       Selected items:       Delete Instance




   Created by Mike Smith on March 1, 2008
   Version history
|     |                                                        Logged in as Username | Logout | Admin | Jobs (3)       | Help

Dashboards |                              | Search |   | Reports |   | Visualizations |   |                                               Application Settings


Reports > View Report

  Ports by firewall > 09/01/08 12:00:00 PM - 09/30/08 12:00:00 PM

   Distinct count of cookie over Time for each file
    cookies (distinct count)
   cookies (distinct count)




                                   Time


   Table

                                                                                                                    [ Report details | Delete instance ]
| Export results
| Export results

New report
Use existing report...
|     |                                                                                                      Logged in as Username | Logout | Admin | Jobs (3)             | Help

Dashboards |       | Search |    | Reports |       | Visualizations |      |                                                                                            Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set
       Search: sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ...

    2: Choose report type (don't worry, you can change it later)

        Popular

                                       TOP VALUES                              Bar                  Pie                      Table Only
        Trend over time                ?


         Distribution                                                                               Multi Series             Multi Series                Split Series
                                       TREND OVER TIME                         Line                 Multiple                 Multiple                    Stacked
                                       ?                                                            Line                     Column                      Column
         Correlation


                                       CORRELATION                             Column
                                       ?


     3: Choose fields

    4: Format report
|     |                                                                                                      Logged in as Username | Logout | Admin | Jobs (3)             | Help

Dashboards |       | Search |    | Reports |       | Visualizations |      |                                                                                            Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set
       Search: sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ...

    2: Choose report type (don't worry, you can change it later)

        Popular

                                       TOP VALUES                              Bar                  Pie                      Table Only
        Trend over time                ?


         Distribution                                                                               Multi Series             Multi Series                Split Series
                                       TREND OVER TIME                         Line                 Multiple                 Multiple                    Stacked
                                       ?                                                            Line                     Column                      Column
         Correlation


                                       CORRELATION                             Column
                                       ?


     3: Choose fields

    4: Format report
|     |                                                                           Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |       | Search |     | Reports |     | Visualizations |        |                                                        Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series       [ Start over ]


    3: Choose fields
       show distinct count                                   of    y-axis field   ?   over Time

       by      enter secondary / split by field     ?



    4: Format report
|     |                                                                                                  Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |       | Search |     | Reports |     | Visualizations |        |                                                                               Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series       [ Start over ]


    3: Choose fields
       show distinct count                                    of   y-axis field                          ?   over Time

       by      enter secondary / split by field     ?
                                                        y-axis:                   secondary / split by
                                                                                  field values
                                                        y-axis
                                                        field
    4: Format report
                                                                    x-axis: Time
|     |                                                                               Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |        | Search |         | Reports |    | Visualizations |        |                                                        Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series           [ Start over ]


    3: Choose fields
       show distinct count                                       of    y-axis field   ?   over Time

       by        instead of a field
                enter secondary / split by field        ?
                      count of events
               [ Remove split ]

    4: Format for any field
              report
                      distinct count
                      count of occurrences
                   for numerical fields
                   (or to force categorical fields)
                      average
                      sum
                      min
                      max
                      median
                      mode
                      percentile (1-99) >
                      variance
                      standard deviation
|     |                                                                      Logged in as Username | Logout | Admin | Jobs (3)     | Help

Dashboards |       | Search |     | Reports |     | Visualizations |     |                                                      Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series       [ Start over ]


    3: Choose fields
       show distinct count                                   of    |         ?   over Time

       by      enter secondary / split by field     ?



    4: Format report
|                 |                                                                                              Logged in as Username | Logout | Admin | Jobs (3)       | Help

Dashboards |                       | Search |       | Reports |       | Visualizations |      |                                                                        Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series                            [ Start over ]


    3: Choose fields
       show distinct count                                                        of    cookies                       over Time

       by                        enter secondary / split by field        ?



     3: Format report
      Chart (Preview) Run report to see the actual data.

              Chart type:
                                                                                                                                                        Time range binning options...


                                                 General options
                         General
                                                 Title                                               Legend position
                                 X-Axis
                                                  Distinct count of cookie over Time for each file   Right of chart                         Show tick labels
        Y-Axis / Series                                                                                                                                                 Apply
                                                                                                     Show missing values as                 Show gridlines
                                                                                                     Gaps                                                               Cancel




       Count of Cookies vs. Time
               cookies (count)




     Table             [ Show | Hide ]
Splunk | Reporting - Usability Wireframes
|                 |                                                                                              Logged in as Username | Logout | Admin | Jobs (3)       | Help

Dashboards |                         | Search |      | Reports |      | Visualizations |      |                                                                        Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series                            [ Start over ]


    3: Choose fields
       show distinct count                                                        of    cookies                       over Time

       by                        |                                       ?



     3: Format report
      Chart (Preview) Run report to see the actual data.

              Chart type:
                                                                                                                                                        Time range binning options...


                                                  General options
                         General
                                                  Title                                              Legend position
                                 X-Axis
                                                  Distinct count of cookie over Time for each file   Right of chart                         Show tick labels
        Y-Axis / Series                                                                                                                                                 Apply
                                                                                                     Show missing values as                 Show gridlines
                                                                                                     Gaps                                                               Cancel




       Count of Cookies vs. Time
               cookies (count)




     Table             [ Show | Hide ]
|                    |                                                                                            Logged in as Username | Logout | Admin | Jobs (3)       | Help

Dashboards |                              | Search |      | Reports |      | Visualizations |      |                                                                         Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series                               [ Start over ]


    3: Choose fields
       show distinct count                                                           of    cookies                          over Time

       by                            file



     3: Format report                                                                                                                                Run report            Save report

     Chart (Preview) Run report to see the actual data.

                       Chart type:                                                                                                                            Time range binning options...


                                    General            General options
                                        X-Axis         Title                                              Legend position
                                                       Distinct count of cookie over Time for each file   Right of chart                          Show tick labels
                                                                                                                                                                              Apply
                                                                                                                                                  Show gridlines
                                                                                                                                                                              Cancel




       Distinct count of cookie over Time for each file
         cookies (distinct count)
        cookies (distinct count)




                                    Time

    Table                 [ Show | Hide ]
Splunk | Reporting - Usability Wireframes
|                   |                                                                 Logged in as Username | Logout | Admin | Jobs (3)       | Help

Dashboards |                              | Search |    | Reports |     | Visualizations |   |                                                    Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series                           [ Start over ]


    3: Choose fields
       show distinct count                                                       of    cookies   over Time

       by                           file



     3: Format report                                                                                                     Run report            Save report

     Chart (Preview) Run report to see the actual data.

                        Chart type:                                                                                                Time range binning options...


                                   General             X-Axis options
                                        X-Axis
                                                        Label
        Y-Axis / Series                                 Time
                                                                                                                                                    Apply

                                                                                                                                                    Cancel




       Distinct count of cookie over Time for each file
        cookies (distinct count)
       cookies (distinct count)




                                   Time

    Table                [ Show | Hide ]
Splunk | Reporting - Usability Wireframes
|                   |                                                                                                   Logged in as Username | Logout | Admin | Jobs (3)            | Help

Dashboards |                              | Search |    | Reports |     | Visualizations |    |                                                                                          Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series                           [ Start over ]


    3: Choose fields
       show distinct count                                                       of    cookies                                   over Time

       by                           file



     3: Format report                                                                                                                                          Run report              Save report

     Chart (Preview) Run report to see the actual data.

                        Chart type:                                                          Time range binning options                                                   Time range binning options...

                                                                                             Note: changing these options will cause the search to be run again.
                                   General             X-Axis options
                                        X-Axis
                                                        Label                                     Time span for each bin       For data from:
        Y-Axis / Series                                 Time                                                                   01/01/07:12:00:00 - 01/01/08:12:00:00
                                                                                                         2    day(s)
                                                                                                                                                                                           Apply

                                                                                                     = 183 bins (300 max)                                                                  Cancel



                                                                                                                                                 Cancel            Save
       Distinct count of cookie over Time for each file
        cookies (distinct count)
       cookies (distinct count)




                                   Time

    Table                [ Show | Hide ]
Splunk | Reporting - Usability Wireframes
|              |                                                                                            Logged in as Username | Logout | Admin | Jobs (3)           | Help

Dashboards |                             | Search |     | Reports |     | Visualizations |      |                                                                               Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series                              [ Start over ]


    3: Choose fields
       show distinct count                                                          of    cookies                          over Time

         by                         file



     3: Format report                                                                                                                               Run report                Save report

     Chart (Preview) Run report to see the actual data.

                           Chart type:                                                                                                                           Time range binning options...


                                   General            Y-Axis / Series axis options                          Series label                   Color    Hide value
                                       X-Axis
                                                       Label                                    Min value     File 1
           Y-Axis / Series                             Time (distinct count)
                                                       cookies
                                                                                                              File 2                                                             Apply
                                                       Scale                                    Max value
                                                          Linear      Logarithmic                             File 3                                                             Cancel




      Distinct count of cookie over Time for each file
       cookies (distinct count)
      cookies (distinct count)




                                  Time

   Table                [ Show | Hide ]
Splunk | Reporting - Usability Wireframes
|                    |                                                                                            Logged in as Username | Logout | Admin | Jobs (3)       | Help

Dashboards |                             | Search |      | Reports |      | Visualizations |      |                                                                         Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series                              [ Start over ]


    3: Choose fields
       show distinct count                                                          of    cookies                          over Time

       by                           file



     3: Format report                                                                                                                                                     Save report

     Chart

                      Chart type:                                                                                                                            Time range binning options...


                                   General            General options
                                       X-Axis         Title                                              Legend position
       Y-Axis / Series                                Distinct count of cookie over Time for each file   Right of chart                          Show tick labels
                                                                                                                                                                             Apply
                                                                                                                                                 Show gridlines
                                                                                                                                                                             Cancel




       Distinct count of cookie over Time for each file
        cookies (distinct count)
       cookies (distinct count)




                                   Time

    Table                [ Show | Hide ]
Splunk | Reporting - Usability Wireframes
|                     |                                                                                     Logged in as Username | Logout | Admin | Jobs (3)         | Help

Dashboards |                                | Search |       | Reports |      | Visualizations |      |                                                                     Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

 WARNING: any changes you make here may not be reflected in the simple mode. You can't go back!                                                                   [ New Report ]

     1: Define data set
  sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ...                           >
     Reporting assistance

  Timeframe: Last 24 hours


       Format report                                                                                                                            Run report              Save report

       Chart (Preview) Run report to see the actual data.

                       Chart type:                                                                                                                           Time range binning options...


                                       General           General options
                                        X-Axis           Title                                              Legend position
          Y-Axis / Series                                Distinct count of cookie over Time for each file   Right of chart                     Show tick labels
                                                                                                                                                                             Apply
                                                                                                                                               Show gridlines
                                                                                                                                                                            Cancel




          Distinct count of cookie over Time for each file
            cookies (distinct count)
           cookies (distinct count)




                                       Time

     Table                   [ Show | Hide ]
Splunk | Reporting - Usability Wireframes
|                     |                                                                                                 Logged in as Username | Logout | Admin | Jobs (3)          | Help

Dashboards |                                 | Search |       | Reports |      | Visualizations |      |                                                                                 Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]                                                                                                                                                     [ New Report ]

     1: Define data set
  sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ...                                        >
     Reporting assistance

  Timeframe: Last 24 hours


 General options
    type                timechart

    show distinct count                                                              of   cookies                                 over Time

    and                split field                                                   by file


 Time range binning options
    Time span for each bin                                   For data from:
                       2                    day(s)           01/01/07:12:00:00 - 01/01/08:12:00:00    = 183 bins (300 max)                                                  Cancel          Run



 Format report                                                                                                                                                                       Save report

       Chart (Preview) Run report to see the actual data.

                       Chart type:


                                       General            General options
                                        X-Axis            Title                                                        Legend position
          Y-Axis / Series                                 Distinct count of cookie over Time for each file              Right of chart                     Show tick labels
                                                                                                                                                                                         Apply
                                                                                                                                                           Show gridlines
                                                                                                                                                                                         Cancel




          Distinct count of cookie over Time for each file
            cookies (distinct count)
           cookies (distinct count)
Time

Table   [ Show | Hide ]
| Export results




               Report on Field
               Top Values | Top Values over time | Distinct Values over time
|     |                                                                                                      Logged in as Username | Logout | Admin | Jobs (3)             | Help

Dashboards |       | Search |    | Reports |       | Visualizations |      |                                                                                            Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set
       Search: sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ...

    2: Choose report type (don't worry, you can change it later)

        Popular

                                       SINGLE SERIES                           Line              Area                 Column                                          Table Only
        Trend over time                ?


         Distribution
                                                                               Multiple          Stacked              Stacked               Multiple
                                       SPLIT SERIES                                                                                                                   Table Only
                                                                               Line              Area                 Column                Column
                                       ?
         Correlation


                                                                               Multiple          Multiple                                                             Table Only
                                       MULTIPLE SERIES                         Line              Column
                                       ?



                                                                               Stacked           Multiple
                                       TOP VALUES                                                                                                                     Table Only
                                                                               Column            Column
                                       ?




     3: Choose fields

    4: Format report
|     |                                                                                                      Logged in as Username | Logout | Admin | Jobs (3)              | Help

Dashboards |       | Search |    | Reports |       | Visualizations |      |                                                                                             Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set
       Search: sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ...

    2: Choose report type (don't worry, you can change it later)

        Popular

                                       TOP VALUES                              Bar              Pie               Table Only        For distribution over time see Trend over time
        Trend over time                ?


         Distribution
                                       RARE VALUES                             Table Only
                                       ?
         Correlation


                                       CONTINGENCY TABLE                       Table Only                         Heat Map
                                       ?


     3: Choose fields

    4: Format report
|     |                                                                                                      Logged in as Username | Logout | Admin | Jobs (3)             | Help

Dashboards |       | Search |    | Reports |       | Visualizations |      |                                                                                            Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set
       Search: sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ...

    2: Choose report type (don't worry, you can change it later)

        Popular

                                                   Scatter              Column                                    Table Only        For correlation over time see Trend over time
        Trend over time


         Distribution


         Correlation




     3: Choose fields

    4: Format report
Correlation
  2: Report type: Correlation   [ Start over ]


   3: Choose fields
      show distinct count                              of    y-axis field   ?   over    x-axis field   ?




Trend over Time, Multiple Series
  2: Report type: Trend over time, multiple series   [ Start over ]


   3: Choose fields
      show distinct count                              of    y-axis field   ?   over time


    + show distinct count                              of    y-axis field   ?

            [ add series ]



   3: Choose fields
      show distinct count                              of    y-axis field   ?   over time


    + show distinct count                              of    y-axis field   ?


    + show distinct count                              of    y-axis field   ?   [ remove series ]

   + show distinct count                               of    y-axis field   ?   [ remove series ]

            [ add series ]
|     |                                                                                                           Logged in as Username | Logout | Admin | Jobs (3)                 | Help

Dashboards |       | Search |     | Reports |       | Visualizations |         |                                                                                                 Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series - Table only         [ Start over ]


    3: Choose fields
       show distinct count                                    of   column                                     ?    over Time (rows)

       by      enter secondary / split by field        ?




  Version 2
    3: Choose fields
       rows                Time

       column values       distinct count                                 of       enter field for column values       ?
                                                                                                                               ?
       columns             enter split by field for columns        ?                                                                           split by field   split by field
                                                                                                                               Time (Rows)           value 1          value 1

                                                                                                                               Time range 1   column value 1    y-axis value 3
                                                                                                                               Time range 2 column value 2      y-axis value 4
|           |                                                                                        Logged in as Username | Logout | Admin | Jobs (3)            | Help

Dashboards |             | Search |   | Reports |     | Visualizations |         |                                                                             Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series - Table only            [ Start over ]


    3: Choose fields
       show distinct count                                      of     cookies                           over Time

       by            file

                 [ Remove split ]


     3: Format report                                                                                                                  Run report           Save report
     Table (Preview) Run report to see the actual data.                                                                                         Time range binning options...


         Table options
                                                                                     Column 1 / X-Axis     Column 2+ / Y-Axis
             Title                                                                   Label                 Label
             Distinct count of cookie over Time for each file                        Time                   cookies (distinct count)
                                                                                                                                                                Apply

                                                                                                                                                                Cancel




      Distinct count of cookie over Time for each file
      Time                                  Cookies (distinct count)
       Date range                            File 1              File 1                      File 1
       04/01/08 - 04/30/08                      54                   54                         54

       03/01/08 - 10/30/08                    4599               4599                        4599

       02/01/08 - 02/28/08                      65                   65                         65

       01/01/08 - 01/31/08                    8675               8675                        8675
X-Axis options - numerical field
   3: Format report
   Chart (Preview) Run report to see the actual data.


     General                   X-Axis options
     X- Axis
                               Label                          Min value
     Y-Axis / Series           Time
                                                                          Apply
                               Scale                          Max value
                                  Linear        Logarithmic               Cancel




 X-Axis options - categorical field
    3: Format report
   Chart (Preview) Run report to see the actual data.


      General                 X-Axis options
      X- Axis
                               Label
      Y-Axis / Series          Time
                                                                          Apply

                                                                          Cancel
|      |                                                                                            Logged in as Username | Logout | Admin | Jobs (3)       | Help

Dashboards |          | Search |      | Reports |      | Visualizations |      |                                                                         Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series           [ Start over ]


    3: Choose fields
       show distinct count                                       of    cookies                          over Time

       by       file

               [ Remove split ]


     3: Format report                                                                                                            Run report            Save report

     Chart (Preview) Run report to see the actual data.

             Chart type:                                                                                                                  Time range binning options...


               General             General options
                    X-Axis         Title                                              Legend position
        Y-Axis / Series            Distinct count of cookie over Time for each file   Right of chart                          Show tick labels
                                                                                                                                                          Apply
                                                                                      Show missing values as                  Show gridlines
                                                                                      Gaps                                                                Cancel
|                    |                                                                                              Logged in as Username | Logout | Admin | Jobs (3)      | Help

Dashboards |                            | Search |        | Reports |       | Visualizations |       |                                                                       Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set

    2: Report type: Trend over time, split series                                 [ Start over ]


    3: Choose fields
       show distinct count                                                             of    cookies                          over Time

       by                            file

                                    [ Remove split ]


     3: Format report                                                                                                                                  Run report           Save report

     Chart (Preview) Run report to see the actual data.

                       Chart type:


                                    General        Y-Axis / Series options                                     Series label               Marker    Line color Hide
                          Time Axis
                                                       Label                                       Min value     File 1
        Y-Axis / Series                                cookies (distinct count)
                                                                                                                 File 2                                                       Apply
                                                       Scale                                       Max value
                                                          Linear        Logarithmic                              File 3                                                       Cancel




       Distinct count of cookie over Time for each file
         cookies (distinct count)
        cookies (distinct count)




                                                                                                                  imagine that these bars are lines :D



                                    Time

    Table                 [ Show | Hide ]
Splunk | Reporting - Usability Wireframes
|     |                                                                                                      Logged in as Username | Logout | Admin | Jobs (3)             | Help

Dashboards |       | Search |    | Reports |       | Visualizations |      |                                                                                            Application Settings


Reports > Report on Results
[ Reportorama | Advanced ]

    1: Define data set
       Search: sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ...

    2: Choose report type (don't worry, you can change it later)

        Popular

                                       TOP VALUES                              Bar            Pie                 Table Only
        Trend over time                ?


         Distribution
                                       TREND OVER TIME                         Line           Multiple            Multiple              Stacked
                                                                                              Line                Column                Column
                                       ?
         Correlation
                                            TREND OVER TIME
                                            One-sentence definition.
                                       CORRELATION                             Column
                                       ?  example
                                            One awesome example.

     3: Choose fields

    4: Format report

More Related Content

PDF
Splunk | Reporting - Concepts 2
PDF
Splunk | Reporting - Concepts 1
PDF
Splunk | Change Management App Wireframes
PDF
Spiceworks Basics 2: Help Desk & Reporting
PDF
Emakina Academy - 5 - Know your audience - Web Analytics
PPTX
Using Data from Google Analytics
PDF
Beyond Wireframes from Voices That Matter (Oct 2007)
PPTX
Finding industry ratios using BizMiner Academic
Splunk | Reporting - Concepts 2
Splunk | Reporting - Concepts 1
Splunk | Change Management App Wireframes
Spiceworks Basics 2: Help Desk & Reporting
Emakina Academy - 5 - Know your audience - Web Analytics
Using Data from Google Analytics
Beyond Wireframes from Voices That Matter (Oct 2007)
Finding industry ratios using BizMiner Academic

Similar to Splunk | Reporting - Usability Wireframes (20)

PPT
AD Audit Plus a Detailed Walkthrough
PDF
Network World Presentation
PDF
ManageEngine ADAudit Plus - Active Directory audit software
PPT
Gauge March 2012
PPT
How to Ensure Your Agile PLM Solution Provides Maximum Value
PDF
PPT
RSA 2006 - Visual Security Event Analysis
PDF
AltiGen Alti Report Manual
PDF
2010 sectool
PPTX
Custom Reporting Trainging with Bluforce
PPTX
WKU InfoView Navigation Training Slides on
PDF
Navigating Google Analytics
PPTX
5 Essential Reports for Running Your Business
PPTX
Work smarter using sharepoint 2010 misa version2
PDF
Google Analytics Basics for NCSU Libraries' Staff
PDF
Setting Up Help Desk And User Portal
PPTX
Maximizing the Value of Your Agile PLM Solution: NexInfo
PDF
Microsoft sccm 2012 seminar ddls sydney 22 nov 2012
PPTX
Wku infoview.pptx
PPT
How-To: WSUS Reporting Made Easier
AD Audit Plus a Detailed Walkthrough
Network World Presentation
ManageEngine ADAudit Plus - Active Directory audit software
Gauge March 2012
How to Ensure Your Agile PLM Solution Provides Maximum Value
RSA 2006 - Visual Security Event Analysis
AltiGen Alti Report Manual
2010 sectool
Custom Reporting Trainging with Bluforce
WKU InfoView Navigation Training Slides on
Navigating Google Analytics
5 Essential Reports for Running Your Business
Work smarter using sharepoint 2010 misa version2
Google Analytics Basics for NCSU Libraries' Staff
Setting Up Help Desk And User Portal
Maximizing the Value of Your Agile PLM Solution: NexInfo
Microsoft sccm 2012 seminar ddls sydney 22 nov 2012
Wku infoview.pptx
How-To: WSUS Reporting Made Easier
Ad

More from Beth Goldman (20)

PPTX
User Experience @InsideView
PPTX
InsideView | UI Screens + Notes
DOCX
Splunk | Reporting Final Comps
DOCX
Splunk | Save Report Use Cases
XLS
Splunk | Charting Rules
DOCX
Splunk | Reporting Usability Tasks
PDF
Splunk | LDAP & Role Mapping Use Cases
PDF
Splunk | UI Messaging Spec
PDF
Splunk | Reporting Use Cases
DOC
Intuit | Husky Ui Spec
PPTX
Splunk | Topology ID & VisD Updates
PPT
Splunk | Use Case Training
PPT
Y! Travel | Optimization Project Goals
PPT
Y! Travel | UE Optimization Summary
PDF
Y! Travel UE Schedule
PPT
Intuit | Husky Design Review Presentation
PPT
Y! Travel | Research Synthesis
PPT
Intuit | Husky E2E Tollgate Presentation
DOC
Intuit | Control Spending Focus Group Findings
PDF
Hotbox Paper
User Experience @InsideView
InsideView | UI Screens + Notes
Splunk | Reporting Final Comps
Splunk | Save Report Use Cases
Splunk | Charting Rules
Splunk | Reporting Usability Tasks
Splunk | LDAP & Role Mapping Use Cases
Splunk | UI Messaging Spec
Splunk | Reporting Use Cases
Intuit | Husky Ui Spec
Splunk | Topology ID & VisD Updates
Splunk | Use Case Training
Y! Travel | Optimization Project Goals
Y! Travel | UE Optimization Summary
Y! Travel UE Schedule
Intuit | Husky Design Review Presentation
Y! Travel | Research Synthesis
Intuit | Husky E2E Tollgate Presentation
Intuit | Control Spending Focus Group Findings
Hotbox Paper
Ad

Splunk | Reporting - Usability Wireframes

  • 1. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports how do I create a new report? Name # Instances Interval Run on Results Start Results End More... Actions Events by time 12 Daily 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Edit Run Ports by firewall 167 Monthly 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Application Configuration Change Report 1 Weekly 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Pie chart 1 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Another report 3 Yearly 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Server Load Distribution 1 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Application Management Change Report 1 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Events by host 12 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Selected items: Delete Report
  • 2. | | how do I createin as Username | Logout | Admin | Jobs (3) Logged a new report? | Help • start a new search and choose option to report on results, OR Application Settings Dashboards | | Search | | Reports | | Visualizations | | • run a saved search and choose option to report on results, OR • choose a completed search job / artifact and choose option to report on results Reports how do I create a new report? Name # Instances Interval Run on Results Start Results End More... Actions Events by time 12 Daily 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Edit Run Ports by firewall 167 Monthly 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Application Configuration Change Report 1 Weekly 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Pie chart 1 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Another report 3 Yearly 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Server Load Distribution 1 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Report Type 01/04/08 0:00 0:00 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Custom/Advanced Application Management Change Report 1 01/04/08 0:00 0:00 01/05/08 0:00 0:00 Run Time # Events Events by host 12 01/04/08 0:00 0:00 1:32:04 5, 000. 948 Preview Selected items: Delete Report
  • 3. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report Details Ports by Firewall [ Edit report | Edit report properties | Delete report ] Instance storage policy... Report Type Date Range Interval Trend over time, split series Week to date None (if schedule, settings and next run time) Report Instances (154) Run Report Results Start Results End Run Start Run by # Events 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Mike Smith 154 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Mike Smith 124 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Mike Smith 54 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Jack Blaney 154 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Joe Shmoe 154 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Dick Van Dyke 124 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Dyke Van Dick 54 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Mike Smith 154 Selected items: Delete Instance Created by Mike Smith on March 1, 2008 Version history
  • 4. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report Details Ports by Firewall [ Edit report | Edit report properties | Delete report ] Instance storage policy... Report Type Date Range Interval Trend over time, split series Week to date None (if schedule, settings and next run time) Report Instances (154) Run Report Results Start Results End Run Start Run by # Events 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Mike Smith 154 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Mike Smith 124 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Mike Smith 54 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Jack Blaney 154 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Joe Shmoe 154 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Dick Van Dyke 124 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Dyke Van Dick 54 01/04/08 0:00 0:00 01/05/08 0:00 0:00 01/04/08 0:00 0:00 Mike Smith 154 Selected items: Delete Instance Created by Mike Smith on March 1, 2008 Version history
  • 5. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > View Report Ports by firewall > 09/01/08 12:00:00 PM - 09/30/08 12:00:00 PM Distinct count of cookie over Time for each file cookies (distinct count) cookies (distinct count) Time Table [ Report details | Delete instance ]
  • 7. | Export results New report Use existing report...
  • 8. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set Search: sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ... 2: Choose report type (don't worry, you can change it later) Popular TOP VALUES Bar Pie Table Only Trend over time ? Distribution Multi Series Multi Series Split Series TREND OVER TIME Line Multiple Multiple Stacked ? Line Column Column Correlation CORRELATION Column ? 3: Choose fields 4: Format report
  • 9. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set Search: sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ... 2: Choose report type (don't worry, you can change it later) Popular TOP VALUES Bar Pie Table Only Trend over time ? Distribution Multi Series Multi Series Split Series TREND OVER TIME Line Multiple Multiple Stacked ? Line Column Column Correlation CORRELATION Column ? 3: Choose fields 4: Format report
  • 10. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of y-axis field ? over Time by enter secondary / split by field ? 4: Format report
  • 11. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of y-axis field ? over Time by enter secondary / split by field ? y-axis: secondary / split by field values y-axis field 4: Format report x-axis: Time
  • 12. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of y-axis field ? over Time by instead of a field enter secondary / split by field ? count of events [ Remove split ] 4: Format for any field report distinct count count of occurrences for numerical fields (or to force categorical fields) average sum min max median mode percentile (1-99) > variance standard deviation
  • 13. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of | ? over Time by enter secondary / split by field ? 4: Format report
  • 14. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of cookies over Time by enter secondary / split by field ? 3: Format report Chart (Preview) Run report to see the actual data. Chart type: Time range binning options... General options General Title Legend position X-Axis Distinct count of cookie over Time for each file Right of chart Show tick labels Y-Axis / Series Apply Show missing values as Show gridlines Gaps Cancel Count of Cookies vs. Time cookies (count) Table [ Show | Hide ]
  • 16. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of cookies over Time by | ? 3: Format report Chart (Preview) Run report to see the actual data. Chart type: Time range binning options... General options General Title Legend position X-Axis Distinct count of cookie over Time for each file Right of chart Show tick labels Y-Axis / Series Apply Show missing values as Show gridlines Gaps Cancel Count of Cookies vs. Time cookies (count) Table [ Show | Hide ]
  • 17. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of cookies over Time by file 3: Format report Run report Save report Chart (Preview) Run report to see the actual data. Chart type: Time range binning options... General General options X-Axis Title Legend position Distinct count of cookie over Time for each file Right of chart Show tick labels Apply Show gridlines Cancel Distinct count of cookie over Time for each file cookies (distinct count) cookies (distinct count) Time Table [ Show | Hide ]
  • 19. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of cookies over Time by file 3: Format report Run report Save report Chart (Preview) Run report to see the actual data. Chart type: Time range binning options... General X-Axis options X-Axis Label Y-Axis / Series Time Apply Cancel Distinct count of cookie over Time for each file cookies (distinct count) cookies (distinct count) Time Table [ Show | Hide ]
  • 21. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of cookies over Time by file 3: Format report Run report Save report Chart (Preview) Run report to see the actual data. Chart type: Time range binning options Time range binning options... Note: changing these options will cause the search to be run again. General X-Axis options X-Axis Label Time span for each bin For data from: Y-Axis / Series Time 01/01/07:12:00:00 - 01/01/08:12:00:00 2 day(s) Apply = 183 bins (300 max) Cancel Cancel Save Distinct count of cookie over Time for each file cookies (distinct count) cookies (distinct count) Time Table [ Show | Hide ]
  • 23. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of cookies over Time by file 3: Format report Run report Save report Chart (Preview) Run report to see the actual data. Chart type: Time range binning options... General Y-Axis / Series axis options Series label Color Hide value X-Axis Label Min value File 1 Y-Axis / Series Time (distinct count) cookies File 2 Apply Scale Max value Linear Logarithmic File 3 Cancel Distinct count of cookie over Time for each file cookies (distinct count) cookies (distinct count) Time Table [ Show | Hide ]
  • 25. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of cookies over Time by file 3: Format report Save report Chart Chart type: Time range binning options... General General options X-Axis Title Legend position Y-Axis / Series Distinct count of cookie over Time for each file Right of chart Show tick labels Apply Show gridlines Cancel Distinct count of cookie over Time for each file cookies (distinct count) cookies (distinct count) Time Table [ Show | Hide ]
  • 27. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] WARNING: any changes you make here may not be reflected in the simple mode. You can't go back! [ New Report ] 1: Define data set sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ... > Reporting assistance Timeframe: Last 24 hours Format report Run report Save report Chart (Preview) Run report to see the actual data. Chart type: Time range binning options... General General options X-Axis Title Legend position Y-Axis / Series Distinct count of cookie over Time for each file Right of chart Show tick labels Apply Show gridlines Cancel Distinct count of cookie over Time for each file cookies (distinct count) cookies (distinct count) Time Table [ Show | Hide ]
  • 29. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] [ New Report ] 1: Define data set sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ... > Reporting assistance Timeframe: Last 24 hours General options type timechart show distinct count of cookies over Time and split field by file Time range binning options Time span for each bin For data from: 2 day(s) 01/01/07:12:00:00 - 01/01/08:12:00:00 = 183 bins (300 max) Cancel Run Format report Save report Chart (Preview) Run report to see the actual data. Chart type: General General options X-Axis Title Legend position Y-Axis / Series Distinct count of cookie over Time for each file Right of chart Show tick labels Apply Show gridlines Cancel Distinct count of cookie over Time for each file cookies (distinct count) cookies (distinct count)
  • 30. Time Table [ Show | Hide ]
  • 31. | Export results Report on Field Top Values | Top Values over time | Distinct Values over time
  • 32. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set Search: sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ... 2: Choose report type (don't worry, you can change it later) Popular SINGLE SERIES Line Area Column Table Only Trend over time ? Distribution Multiple Stacked Stacked Multiple SPLIT SERIES Table Only Line Area Column Column ? Correlation Multiple Multiple Table Only MULTIPLE SERIES Line Column ? Stacked Multiple TOP VALUES Table Only Column Column ? 3: Choose fields 4: Format report
  • 33. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set Search: sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ... 2: Choose report type (don't worry, you can change it later) Popular TOP VALUES Bar Pie Table Only For distribution over time see Trend over time Trend over time ? Distribution RARE VALUES Table Only ? Correlation CONTINGENCY TABLE Table Only Heat Map ? 3: Choose fields 4: Format report
  • 34. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set Search: sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ... 2: Choose report type (don't worry, you can change it later) Popular Scatter Column Table Only For correlation over time see Trend over time Trend over time Distribution Correlation 3: Choose fields 4: Format report
  • 35. Correlation 2: Report type: Correlation [ Start over ] 3: Choose fields show distinct count of y-axis field ? over x-axis field ? Trend over Time, Multiple Series 2: Report type: Trend over time, multiple series [ Start over ] 3: Choose fields show distinct count of y-axis field ? over time + show distinct count of y-axis field ? [ add series ] 3: Choose fields show distinct count of y-axis field ? over time + show distinct count of y-axis field ? + show distinct count of y-axis field ? [ remove series ] + show distinct count of y-axis field ? [ remove series ] [ add series ]
  • 36. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series - Table only [ Start over ] 3: Choose fields show distinct count of column ? over Time (rows) by enter secondary / split by field ? Version 2 3: Choose fields rows Time column values distinct count of enter field for column values ? ? columns enter split by field for columns ? split by field split by field Time (Rows) value 1 value 1 Time range 1 column value 1 y-axis value 3 Time range 2 column value 2 y-axis value 4
  • 37. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series - Table only [ Start over ] 3: Choose fields show distinct count of cookies over Time by file [ Remove split ] 3: Format report Run report Save report Table (Preview) Run report to see the actual data. Time range binning options... Table options Column 1 / X-Axis Column 2+ / Y-Axis Title Label Label Distinct count of cookie over Time for each file Time cookies (distinct count) Apply Cancel Distinct count of cookie over Time for each file Time Cookies (distinct count) Date range File 1 File 1 File 1 04/01/08 - 04/30/08 54 54 54 03/01/08 - 10/30/08 4599 4599 4599 02/01/08 - 02/28/08 65 65 65 01/01/08 - 01/31/08 8675 8675 8675
  • 38. X-Axis options - numerical field 3: Format report Chart (Preview) Run report to see the actual data. General X-Axis options X- Axis Label Min value Y-Axis / Series Time Apply Scale Max value Linear Logarithmic Cancel X-Axis options - categorical field 3: Format report Chart (Preview) Run report to see the actual data. General X-Axis options X- Axis Label Y-Axis / Series Time Apply Cancel
  • 39. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of cookies over Time by file [ Remove split ] 3: Format report Run report Save report Chart (Preview) Run report to see the actual data. Chart type: Time range binning options... General General options X-Axis Title Legend position Y-Axis / Series Distinct count of cookie over Time for each file Right of chart Show tick labels Apply Show missing values as Show gridlines Gaps Cancel
  • 40. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set 2: Report type: Trend over time, split series [ Start over ] 3: Choose fields show distinct count of cookies over Time by file [ Remove split ] 3: Format report Run report Save report Chart (Preview) Run report to see the actual data. Chart type: General Y-Axis / Series options Series label Marker Line color Hide Time Axis Label Min value File 1 Y-Axis / Series cookies (distinct count) File 2 Apply Scale Max value Linear Logarithmic File 3 Cancel Distinct count of cookie over Time for each file cookies (distinct count) cookies (distinct count) imagine that these bars are lines :D Time Table [ Show | Hide ]
  • 42. | | Logged in as Username | Logout | Admin | Jobs (3) | Help Dashboards | | Search | | Reports | | Visualizations | | Application Settings Reports > Report on Results [ Reportorama | Advanced ] 1: Define data set Search: sourcetype=access_combined | timechart span=1m count(_raw) by product_id usenull=f useother=f | rename AV-CB-01 as "Amazon Parrot" , AV-SB-02 as Finch, ... 2: Choose report type (don't worry, you can change it later) Popular TOP VALUES Bar Pie Table Only Trend over time ? Distribution TREND OVER TIME Line Multiple Multiple Stacked Line Column Column ? Correlation TREND OVER TIME One-sentence definition. CORRELATION Column ? example One awesome example. 3: Choose fields 4: Format report