Return
-
Title
How to create a 'pie chart' or 'bar graph' search -
Description
How to create a 'pie chart' or 'bar graph' search.
-
Cause
By default the 'pie chart' and 'bar graph' options are greyed out on the 'Advanced' tab because there is no grouping on the results (events are listed by time by default) so we cannot present the data in 'pie chart' or 'bar graph' format.
-
Resolution
To have the data presented this way we can use the following method:
1) Build the desired search.2) Select the 'Layout' tab and under the 'Order By' the third column to the right, remove Time Detected from the 'Order By'.3) Add the 'Event' column from 'Selected Columns' to the left by using the '>' between the two columns which adds 'Event' to the 'Order By' column.3) Under 'Order By' select 'Event' and under the 'Group By' column, set the value from 'No' to 'Yes'.4) Under Search Results select 'As A Pie Chart' or 'As a Bar Graph'5) Save the search.5) Run the Search and the results will be returned as selected.6) Option are to use the Print button to print the resulting Pie Chart or Bar Graph, use the File | Print To File or Print To PDF options.7) The output of the options in step 6 can then be emailed as an attachment.