Viewing Charts

After you load a dashboard, you can view the charts in that dashboard.

Elements in a Chart

Each chart includes the following elements:

1. The Chart Title for the chart. The data in the chart is defined by the query and the Summary for the chart.

2. Clone. Allows you to copy the chart to an existing dashboard. For details, see Copying a Chart.

3. View Query Results. Displays a table populated with the results of the query for the chart. You can also click through to view additional details about the data for each chart. For details, see Viewing Query Results.

4. Settings. Displays the Add Chart/Edit Chart dialog, where you can edit the chart type, type of data, time range, query, Chart Title, Subtitle, and chart-specific settings (for example, axis titles) for the chart. This option appears only for dashboards that you have created or have admin privileges for. For details about creating a chart, see Creating a Chart.

5. Delete. Removes the chart from the current dashboard. This option appears only for dashboards that you have created or have admin privileges for. For details on deleting a chart, see Deleting a Chart.

Drilling Down

You can drill down into a chart and view more details about the data.

For example, the bar graph above includes the following:

• Query is for entity type Asset

• Query is for the Current time range. By default, this means the present day through 7 days old.

• Query is:

  • Data Sources not match sepm_protection OR Data Sources not match sentinelone_agent

  • This tells Lucidum to search the asset table the includes current data. And to look for assets that don’t use Symantec Endpoint Protection or SentinelOne.

• Summary is:

  • count Lucidum Asset Name by Department

  • order by Lucidum Asset Name

  • This tells Lucidum to create graph where assets are sorted by department. And the graph is organized by number of Lucidum assets, instead of alphabetically by department.

Using the chart above, if we click on the bar for Facility, the chart looks like this:

• Notice that the query (Filter Asset/Current by) now includes a new filter:

  • Department == Facility

• The Summary is unchanged.

• The graph displays the number of assets (234) in the Facility department that do not use Symantec Endpoint Protection or SentinelOne.

• If you have permission to edit this dashboard, you can click the Save (disc) icon to update the existing chart with this new query.

• If you have permission to edit this dashboard, you can also click the Save as (disc with pencil) icon to save this new query as a new chart. However, you must supply a new name in the Chart Title field