Skip to main content
Skip table of contents

Creating a Chart

To create a chart, there are generic steps for all types of charts. Depending on the chart type you select, there are also chart-specific steps when creating a chart. This chapter describes how to create each type of chart.

Best Practices

The Asset History table is the largest database table in Lucidum. To maximize performance, Lucidum recommends that you follow these best practices when creating charts:

  • To view the historical vulnerability data about assets, use the Vulnerability History table instead of the Asset History.

    • For example, you can query the Vulnerability History table for a list of all CVEs (CVE List exists) and then include Lucidum Asset Name as one of the parameters in the chart.

  • If you use the Asset History table in a chart, note that the Lucidum fields (Lucidum Asset Name, Lucidum Asset Type, Lucidum OS Category, Lucidum OS Version, Lucidum Status, Lucidum User Name, Lucidum Vendor) are indexed and provide better performance than fields in Data Source Details.

  • If you use the Asset History table in a chart, limit the scope to only the range of data you need. For example, if you require only 90 days of data, specify that in the query, using the fields in the Age category.

Working Examples

To view real-world examples of dashboards and charts that you can copy and edit, see the Value-Oriented Dashboards included with your Lucidum system.

Creating a Chart: Generic Steps

To add a new chart to a dashboard:

  1. Log in to your Lucidum system.

  2. In the left menu, click Dashboards.

  3. In the Channel pane, click the channel where the dashboard lives.

  4. In the right pane, find the dashboard you want to edit. Click the dashboard name.

  5. Lucidum loads the dashboard.

  6. In the dashboard, click the Add Chart (plus-sign) button.

  7. The Add Chart page appears:

  8. In the Add Chart page, choose a chart type. Choices are:

    • Bar. A bar chart, typically with a count value on the y-axis and a measurement or category on the x-axis.

    • Big Number. Displays a single count value. Note that the Big Number chart type is available only for data sets that are count only. For data sets that are not count only, the Big Number chart type is disabled.

    • Histogram. Uses bars to represent the distribution of values. The y-axis measures a count value, and the x-axis includes intervals (ranges of data) called bins. Note that the Histogram chart type is available only for data sets that include a numeric range on the x-axis.

    • Line. A chart shows a count value on the y-axis and a measurement (usually time) on the x-axis.

    • Nested Pie. A nested pie chart shows two types of related values. The color coding shows which values are related. For example, a nest pie chart could have an inner circle with general types of operating systems (Linux, Mac, Windows) for a group of assets. The outer circle could include versions of operating systems for the same group of assets. The color coding shows which versions go with which general type of operating system. If Windows was green, Windows Server 2019 and Windows Server 2022 would also be green. For details on enabling this chart type, see the section on Nested.

    • Pie. A chart that shows proportions. Each slice represents a category; the “pie” represents the entire population.

    • Gauge. A ring gauge chart displays up to four nested field values on a circular gauge. These charts work best for a field value that can returns values like “critical, high, medium, low”. For details on enabling this chart type, see the section on Gauge.

    • Stacked Bar. A stacked bar chart, typically with a count value on the y-axis and a measurement or category on the x-axis. Each category on the x-axis includes color-coded sub-categories. For example, you create a bar chart that shows number of assets per location. For each location, the bar could include color-coded sub-categories that map to the type of operating system. For details on enabling this chart type, see the section on Stacked.

    • Table. Data sorted by rows (one per instance) and columns (values that describe each instance).

  9. After selecting a chart type, enter values in the following fields:

    • Title. Title of the chart.

    • Subtitle. Second title for the chart.

  10. Select values for the the following fields:

    • Type of Data. This field determines the type of base query that will populate the chart. Choices are:

      • Asset. Retrieve information about assets.

      • Asset-IP Mapping. Lucidum uses proprietary machine-learning algorithms to align each asset with an IP address. You can retrieve information about these asset/IP pairs.

      • User. Retrieve information about users.

      • User-IP Mapping. Lucidum uses proprietary machine-learning algorithms to align each user with an IP address. You can retrieve information about these user/IP pairs.

      • Vulnerability. Retrieve information about vulnerabilities.

    • Time Range. This field determines whether the base query that populates the chart will use current data or historical data. Choices are:

      • Current. The default value is from the present day to 7 days old.

      NOTE: To optimize performance, the default time range is Current. If you need to access historical data, contact Lucidum Custom Success for help on using historical data without affecting performance.

    • Configure Filters. Clicking this button leads to the Refine Scope modal, where you can build the base query that will populate the chart. For details on building queries, see the chapter on Building Queries.

    • The remaining fields differ depending on the type of chart you choose.

Creating a New Chart with Save As

Lucidum allows you to edit an existing chart and save the edited chart as a new chart.

To create a new chart with the Save As feature:

  1. Log in to your Lucidum system.

  2. In the left menu, click Dashboards.

  3. In the Channel pane, click the channel where the dashboard lives.

  4. In the right pane, find the dashboard you want to edit. Click the dashboard name.

  5. Lucidum loads the dashboard.

  6. In the dashboard, click the Edit This Dashboard (pencil) button.

  7. Note that now each chart includes a set of icons to the right of the chart name.:

  8. Find the chart you want to Save As. Click its Settings (pencil) icon. The Edit Chart page appears.

  9. In the Edit Chart page, you can edit any of the fields for the chart, including the query.

  10. For details on all the fields in a chart, see the chapter on Creating a Chart.

  11. For details on creating and editing queries, see the chapter on Building Queries.

  12. Provide a new value in the Title field.

  13. To save you changes as a new chart, enter a new value in the click the Preview (eye) icon and then click the Save As (disc with pencil) icon.The new chart appears in your current dashboard.

Creating a Bar Chart

A bar chart typically includes a count value on the y-axis and a measurement or category on the x-axis.

  1. After selecting Bar as a chart type and providing values for Title, Subtitle, Type of Data, Time Range, and Configure Filters, you must enter values in the remaining fields.

  2. Supply values in the following fields:

    • Category. For bar charts, this is the value in the y-axis. Choose a value for which you want a count. For example, if you select “Lucidum Asset Name”, the y-axis will display a count of assets for the attribute in the Series. You can select any field that is returned by the base query in the Configure Filters field.

      • For Assets, the default value is Lucidum Asset Name, but you can edit this value.

      • For Users, the default value is Lucidum User name, but you can edit this value.

      • For Vulnerabilities, the default value is CVE List, but you can edit this value.

      • For Asset-IP Mapping, the default value is IP Address, but you can edit this value.

      • For User-IP Mapping, the default value is IP Address, but you can edit this value.

    • :sigma:. If you choose a numeric value in the Category field, the sigma field appears. In this field, you can specify whether you want to display Average Value, Count, Minimum Value, Maximum Value, or Sum of Values

    • Series. The attribute that you want to display on the x-axis. For example, if you select “OS and Version”, the bar chart will display the number of assets for each OS and version. You can select any field that is returned by the base query in the Configure Filters field.

    • Sort By. Specify how to sort the bar chart. Your choices are by the value of Category or the value of Series. You can use the arrow to the right to specify ascending or descending.

  3. Click the eye-icon to view a preview of the chart.

  4. If you click the gear icon in the lower right corner, you can apply additional settings to the bar chart.

    • Number of Series Labels. Number of bars on the x-axis. Values can be from 1-100.

    • Rename Data Labels. By default, the x-axis labels are assigned values from the ingested values. If you would like to rename a label:

      • In the field on the left, select from the list of label names in the chart.

      • In the field on the right, enter the new label name.

    • Numeric Format. See descriptions of the possible values in the Numeric Format section.

  5. Click the disc icon in the lower right corner to save the chart.

Using a Bar Chart to Create a Time-Series

You can use the fields in the Age category to create a time series with a bar chart.

For example, you could create a bar chart that displays the number of new users, by date:

To create this chart, we specified the following:

  1. We created a bar chart.

  2. We searched the user database for all Lucidum User Names.

  3. The Category (y axis) is the number of Lucidum User Names.

  4. The Series (x axis) specifies the date the user was first seen.

  5. The Group Series By field specifies Day. This means that we want to see the number of users for each day.

  6. The Sort By field specifies that we want to order the value by First Time Seen, from most recent to least recent.

Creating a Big Number Chart

A big number chart displays a count with a number as the only element in the chart.

  1. After selecting Big Number as a chart type and providing values for Title, Subtitle, Type of Data, Time Range, and Configure Filters, you must enter values in the reamaining fields.

  2. Supply values in the following fields:

    • Category. For big number charts, this is the attribute that will be displayed in the chart. Choose a value for which you want a count. You can select any field that is returned by the base query in the Configure Filters field. For example, if you select “Lucidum Asset Name”, chart will display a count of assets.

      • For Assets, the default value is Lucidum Asset Name, but you can edit this value.

      • For Users, the default value is Lucidum User name, but you can edit this value.

      • For Vulnerabilities, the default value is CVE List, but you can edit this value.

      • For Asset-IP Mapping, the default value is IP Address, but you can edit this value.

      • For User-IP Mapping, the default value is IP Address, but you can edit this value.

    • :sigma:. If you choose a numeric value in the Category field, the sigma field appears. In this field, you can specify whether you want to display Average Value, Count, Minimum Value, Maximum Value, or Sum of Values

  3. Click the eye-icon to view a preview of the chart.

  4. If you click the gear icon in the lower right corner, you can apply additional settings to the chart.

  5. Click the disc icon in the lower right corner to save the chart.

Creating a Histogram Chart

Histogram charts use bars to represent the distribution of values. The y-axis measures a count value, and the x-axis includes intervals (ranges of data) called bins. Note that the Histogram chart is available only for data sets that include a numeric range on the x-axis.

  1. After selecting Histogram as a chart type and providing values for Title, Subtitle, Type of Data, Time Range, and Configure Filters, you must enter values in the remaining fields.

  2. Supply values in the following fields:

    • Category. For histogram charts, this is the value in the y-axis. Choose a value for which you want a count. For example, if you select “Lucidum Asset Name”, the y-axis will display a count of assets for the attribute in the Series. You can select any field that is returned by the base query in the Configure Filters field.

      • For Assets, the default value is Lucidum Asset Name, but you can edit this value.

      • For Users, the default value is Lucidum User name, but you can edit this value.

      • For Vulnerabilities, the default value is CVE List, but you can edit this value.

      • For Asset-IP Mapping, the default value is IP Address, but you can edit this value.

      • For User-IP Mapping, the default value is IP Address, but you can edit this value.

    • :sigma:. If you choose a numeric value in the Category field, the sigma field appears. In this field, you can specify whether you want to display Average Value, Count, Minimum Value, Maximum Value, or Sum of Values

    • Series. The attribute that you want to display on the x-axis. This must be a field with a numeric value. You can select numeric field that is returned by the base query in the Configure Filters field.

    • Sort By. Specify how to sort the bar chart. Your choices are by the value of Category or the value of Series. You can use the arrow to the right to specify ascending or descending.

  3. Click the eye-icon to view a preview of the chart.

  4. If you click the gear icon in the lower right corner, you can apply additional settings to the chart.

    • Number of Bins. The number of intervals (ranges of data) that will appear on the x-axis. The intervals are represented as bars, like a bar chart.

    • Min. Lowest number on the x-axis.

    • Max.Highest number of the x-axis.

    • Category Title. Label for the x-axis.

    • Series Title. Label for the y-axis.

    • Numeric Format. See descriptions of the possible values in the Numeric Format section.

  5. Click the disc icon in the lower right corner to save the chart.

Creating a Line Chart

Line charts are usually used for time-series data, with a count value on the y-axis and a measurement (usually time) on the x-axis.

  1. After selecting Line as a chart type and providing values for Title, Subtitle, Type of Data, Time Range, and Configure Filters, you must enter values in the remaining fields.

  2. Supply values in the following fields:

    • Category. For line charts, this is the value in the y-axis. Choose a value for which you want a count. For example, if you select “Lucidum Asset Name”, the y-axis will display a count of assets for the attribute in the Series. You can select any field that is returned by the base query in the Configure Filters field.

      • For Assets, the default value is Lucidum Asset Name, but you can edit this value.

      • For Users, the default value is Lucidum User name, but you can edit this value.

      • For Vulnerabilities, the default value is CVE List, but you can edit this value.

      • For Asset-IP Mapping, the default value is IP Address, but you can edit this value.

      • For User-IP Mapping, the default value is IP Address, but you can edit this value.

    • :sigma:. If you choose a numeric value in the Category field, the sigma field appears. In this field, you can specify whether you want to display Average Value, Count, Minimum Value, Maximum Value, or Sum of Values

    • Series. The attribute that you want to display on the x-axis. This is a numeric value or frequently a date. For example, if you select “First Time Seen”, the bar chart will display the number of assets seen each day. You can select any field that is returned by the base query in the Configure Filters field.

    • Group Series By. If you select a date value for the x-axis, you can choose to group data in the y-axis by day, week, month, or year.

    • Sort By. Specify how to sort the bar chart. Your choices are by the value of Category or the value of Series. You can use the arrow to the right to specify ascending or descending.

  3. Click the eye-icon to view a preview of the chart.

  4. If you click the gear icon in the lower right corner, you can apply additional settings to the chart.

    • Category Title. Title for the y-axis

    • Series Title. Title for the x-axis

    • Number of Series Labels. Number of labels on the x-axis. Values can be from 1-100.

    • Rename Data Labels. By default, the x-axis labels are assigned values from the ingested values. If you would like to rename a label:

      • In the field on the left, select from the list of label names in the chart.

      • In the field on the right, enter the new label name.

    • Numeric Format. See descriptions of the possible values in the Numeric Format section.

  5. Click the disc icon in the lower right corner to save the chart.

Creating a Nested Pie Chart

A nested pie chart shows two types of related values. The alignment shows which values are related. For example, a nest pie chart could have an inner circle with general types of operating systems (Linux, Mac, Windows) for a group of assets. The outer circle could include versions of operating systems for the same group of assets. The alignment shows which versions are Linux versions, which versions are Mac versions, and which versions are Windows versions.

  1. After selecting Nested Pie as a chart type and providing values for Title, Subtitle, Type of Data, Time Range, and Configure Filters, you must enter values in the remaining fields.

  2. Supply values in the following fields:

    • Categories. Specify two attributes. The default value is “Lucidum Asset Name”. For nested pie charts, these two attributes are displayed in the chart. The first field specified in Categories appears in the outside ring. The second field specified appears in the inside ring. You can select any field that is returned by the base query in the Configure Filters field.

      • For Assets, the default value is Lucidum Asset Name, but you can edit this value.

      • For Users, the default value is Lucidum User name, but you can edit this value.

      • For Vulnerabilities, the default value is CVE List, but you can edit this value.

      • For Asset-IP Mapping, the default value is IP Address, but you can edit this value.

      • For User-IP Mapping, the default value is IP Address, but you can edit this value.

  3. Click the eye-icon to view a preview of the chart.

  4. If you click the gear icon in the lower right corner, you can apply additional settings to the chart.

    • Number of Rows. Specify the number of query results to include in the chart.

    • Show Label. Include a label on each slice of the pie.

    • Show Legend. Include a color-coded legend for the pie.

    • Rename Data Labels. By default, the x-axis labels are assigned values from the ingested values. If you would like to rename a label:

      • In the field on the left, select from the list of label names in the chart.

      • In the field on the right, enter the new label name.

  5. Click the disc icon in the lower right corner to save the chart.

Creating a Pie Chart

A pie chart displays the sub-components that make up a category. For example, a pie could represent all assets, and each slice could represent the type of assets (VMs, servers, workstations).

  1. After selecting Pie as a chart type and providing values for Title, Subtitle, Type of Data, Time Range, and Configure Filters, you must enter values in the remaining fields.

  2. Supply values in the following fields:

    • Category. For pie charts, this is the value represented by the entire pie. Choose a value for which you want a count. For example, if you select “Lucidum User Name”, the pie represents all the users in Lucidum. You can select any field that is returned by the base query in the Configure Filters field.

      • For Assets, the default value is Lucidum Asset Name, but you can edit this value.

      • For Users, the default value is Lucidum User name, but you can edit this value.

      • For Vulnerabilities, the default value is CVE List, but you can edit this value.

      • For Asset-IP Mapping, the default value is IP Address, but you can edit this value.

      • For User-IP Mapping, the default value is IP Address, but you can edit this value.

    • :sigma:. If you choose a numeric value in the Category field, the sigma field appears. In this field, you can specify whether you want to display Average Value, Count, Minimum Value, Maximum Value, or Sum of Values

    • Series. The attribute that you want to apply to the members of the pie to create slices. For example, if you select “Department”, the pie chart will divide the number of user by department. You can select any field that is returned by the base query in the Configure Filters field.

    • Sort By. Specify how to sort the chart. Your choices are by the value of Category or the value of Series. You can use the arrow to the right to specify ascending or descending.

  3. Click the eye-icon to view a preview of the chart.

  4. If you click the gear icon in the lower right corner, you can apply additional settings to the chart.

    • Number of Rows. Specify the number of query results to include in the chart.

    • Show Label. Include a label on each slice of the pie.

    • Show Legend. Include a color-coded legend for the pie.

    • Rename Data Labels. By default, the x-axis labels are assigned values from the ingested values. If you would like to rename a label:

      • In the field on the left, select from the list of label names in the chart.

      • In the field on the right, enter the new label name.

  5. Click the disc icon in the lower right corner to save the chart.

Creating a Gauge Chart

A ring gauge chart displays up to four nested field values on a circular gauge. These charts work best for fields that return values like “critical, high, medium, low”.

  1. After selecting Gauge as a chart type and providing values for Title, Subtitle, Type of Data, Time Range, and Configure Filters, you must enter values in the remaining fields.

  2. Supply values in the following fields:

    • Category. For gauge charts, this is the value represented by the entire gauge. Choose a value for which you want to monitor values. For example, if you select “Lucidum Asset Name”, the gauge represents all the assets in Lucidum. You can select any field that is returned by the base query in the Configure Filters field.

      • For Assets, the default value is Lucidum Asset Name, but you can edit this value.

      • For Users, the default value is Lucidum User name, but you can edit this value.

      • For Vulnerabilities, the default value is CVE List, but you can edit this value.

      • For Asset-IP Mapping, the default value is IP Address, but you can edit this value.

      • For User-IP Mapping, the default value is IP Address, but you can edit this value.

    • :sigma:. If you choose a numeric value in the Category field, the sigma field appears. In this field, you can specify whether you want to display Average Value, Count, Minimum Value, Maximum Value, or Sum of Values

    • Series. The attribute that you want to apply to the gauge. For example, if you select “Risk Level”, the gauge chart will display the number of assets at each risk level. You can select any field that is returned by the base query in the Configure Filters field.

    • Sort By. Specify how to sort the chart. Your choices are by the value of Category or the value of Series. You can use the arrow to the right to specify ascending or descending.

  3. Click the eye-icon to view a preview of the chart.

  4. If you click the gear icon in the lower right corner, you can apply additional settings to the chart.

    • Number of Rows. Specify the number of query results to include in the chart.

  5. Click the disc icon in the lower right corner to save the chart.

Creating a Stacked Bar Chart

A stacked bar chart is a bar chart, typically with a count value on the y-axis and a measurement or category on the x-axis. Each category on the x-axis includes color-coded sub-categories. For example, you could create a stacked bar chart that shows the number of assets per location. For each location, the bar could include color-coded sub-categories that map to the type of operating system.

  1. After selecting Stacked Bar as a chart type and providing values for Title, Subtitle, Type of Data, Time Range, and Configure Filters, you must enter values in the remaining fields.

  2. Supply values in the following fields:

    • Categories. Specify two attributes. For stacked bar charts, these two attributes are displayed in each bar. The first field specified in Categories appears as the main bar. The second field uses color-coding to show the contents of each bar. You can select any field that is returned by the base query in the Configure Filters field.

      • For Assets, the default value is Lucidum Asset Name, but you can edit this value.

      • For Users, the default value is Lucidum User name, but you can edit this value.

      • For Vulnerabilities, the default value is CVE List, but you can edit this value.

      • For Asset-IP Mapping, the default value is IP Address, but you can edit this value.

      • For User-IP Mapping, the default value is IP Address, but you can edit this value.

  3. Click the eye-icon to view a preview of the chart.

  4. If you click the gear icon in the lower right corner, you can apply additional settings to the chart.

    • Category Title. Title for the y-axis.

    • Series Title. Title for the x-axis

    • Rename Data Labels. By default, the x-axis labels are assigned values from the ingested values. If you would like to rename a label:

      • In the field on the left, select from the list of label names in the chart.

      • In the field on the right, enter the new label name.

    • Number of Rows. This field increases the range of the y-axis and therefore increase the maximum number of assets per bar.

  5. Click the disc icon in the lower right corner to save the chart.

Using a Stacked Bar Chart to Create a Time-Series

You can use the fields in the Age category to create a time series with a bar chart.

For example, you could create a bar chart that displays the number of new users, by date:

To create this chart, we specified the following:

  1. We created a bar chart.

  2. We searched the user database for all Lucidum User Names.

  3. The Category (y axis) is the number of Lucidum User Names.

  4. The Series (x axis) specifies the date the user was first seen.

  5. The Group Series By field specifies Day. This means that we want to see the number of users for each day.

  6. The Sort By field specifies that we want to order the value by First Time Seen, from most recent to least recent.

Creating a Table Chart

Table charts display a matrix, where each row represents an instance and the columns are values that describe each instance.

  1. After selecting Table as a chart type and providing values for Title, Subtitle, Type of Data, Time Range, and Configure Filters, you must enter values in the remaining fields.

  2. Supply values in the following fields:

    • Category. Select a field. This field will be the column value. You can select any field that is returned by the base query in the Configure Filters field. To create multiple columns in the table, select multiple values in the Category field. The columns will appear in the order specified in this field.

      • For Assets, the default value is Lucidum Asset Name, but you can edit this value.

      • For Users, the default value is Lucidum User name, but you can edit this value.

      • For Vulnerabilities, the default value is CVE List, but you can edit this value.

      • For Asset-IP Mapping, the default value is IP Address, but you can edit this value.

      • For User-IP Mapping, the default value is IP Address, but you can edit this value.

    • :sigma:. In this field, you can specify whether you want to display Average Value, Count, Minimum Value, Maximum Value, or Sum of Values for the Category field.

    • Series. Select a field. Each row in the table will be an instance of this field. You can select any field that is returned by the base query in the Configure Filters field.

  3. Click the eye-icon to view a preview of the chart.

  4. If you click the gear icon in the lower right corner, you can apply additional settings to the chart.

    • First Column Title. Title of the first column.

    • Second Column Title. Title for the second column.

    • Number of Total Rows. This field increases or decreases the number of rows in the table.

    • Number of Rows Per Page. This field increases or decreases the number of rows display on a single page.

  5. Click the disc icon in the lower right corner to save the chart.

Numeric Format

In the Numeric Format field, you can select from the following numeric types:

  • int. Positive numeric value (no decimal point).

  • int signed. Positive or negative numeric value (no decimal point)

  • float 1 point. Positive numeric value with 1 place after the decimal

  • float 2 point. Positive numeric value with 2 places after the decimal

  • float 3 point. Positive numeric value with 3 places after the decimal

  • Dollar. Dollar value with two places after the decimal

  • dollar_sign. Positive or negative dollar value with two places after the decimal

  • dollar_round value. Dollar value with no decimal point

  • dollar_round_sign. Positive or negative dollar value with no decimal point

  • float signed 1 point. Positive or negative numeric value with 1 place after the decimal

  • float signed 2 point. Positive or negative numeric value with 2 places after the decimal

  • float signed 3 point. Positive or negative numeric value with 3 places after the decimal

  • percent 1 point. Positive percent value with 1 place after the decimal

  • percent 2 point. Positive percent value with 2 places after the decimal

  • percent 3 point. Positive percent value with 3 places after the decimal

  • percent signed 1 point. Negative or positive percent value with 1 place after the decimal

  • percent signed 2 point. Negative or positive percent value with 2 places after the decimal

  • percent signed 3 point. Negative or positive percent value with 3 places after the decimal

  • SI 1 DIGIT. International system of units. For details, see https://mathworld.wolfram.com/SIPrefixes.html . Values will be displayed with no decimal point. For example, 8,288 would be displayed at 8K.

  • SI 2 DIGIT. International system of units. For details, see https://mathworld.wolfram.com/SIPrefixes.html . Values will be displayed with one place after the decimal point. For example, 8,288 would be displayed at 8.3K.

  • SI 3 DIGIT. International system of units. For details, see https://mathworld.wolfram.com/SIPrefixes.html . Values will be displayed with two places after the decimal point. For example, 8,288 would be displayed at 8.28K.

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.

Contact Support Close