Investigation: Drill into Data in the Navigate View Time Chart

Document created by RSA Information Design and Development on Jun 26, 2017Last modified by RSA Information Design and Development on Jul 28, 2017
Version 2Show Document
  • View in full screen mode
  

The Time Chart visualization allows analysts to visualize activity over time. You can zoom into the data by selecting a time window then selecting the Investigate option. You can then reset the navigation to the time range that was in effect before zooming.

  1. In the Security Analytics menu, select Investigation > Navigate.
    The Time Chart for the current drill point and selected time range is displayed.
    TChart.png
  2. To highlight a period of time on the Time Chart, click over the desired time period and drag the mouse.
    The Time Chart is redrawn for the selected time range, however the meta values are unchanged.
    TChartZoom.png
  3. To drill into the data for the selected time range, click Investigate.
    The URL is updated to reflect the time range override. and the Investigation options panel is updated to reflect the custom time range. The Time Chart is redrawn and the meta values are loaded for the selected time range.
    TChartZoom.png
  4. To reset the Time Chart to original time range, click Reset Zoom.
    The URL is updated to reflect the original URL prior to zooming into the data, and the Investigation options panel is updated to reflect the time range selected before zoom. The Time Chart is redrawn for the selected time range and the meta values are loaded for that time range.
    TChart.png
Previous Topic:Create a Custom Query
You are here
Table of Contents > Conduct an Investigation > Query Data in the Navigate View > Drill into Data in the Navigate View Time Chart

Attachments

    Outcomes