Sumo Logic Confidential

Creating Charts and Dashboards

December 2015

How-To Webinar

Sumo Logic Confidential

Agenda

Dashboards and Panels – Overview

Creating Dashboard Panels

Charting Your Data

Live versus Interactive Dashboards

Filters

Drilldowns

Sumo Logic Confidential

Sumo Logic Data Flow

Data Collection Search & Analyze Visualize & Monitor

Alerts

Dashboards

Collectors

Sources

Operators

Charts

1 2 3

Sumo Logic Confidential

• Collection of Panels that provide graphical representation of data – Each Panel processes results of a single search– Drilldown capability for Additional Analysis

• Drill into the query behind the dashboard• Drill to another dashboard

Introduction to Dashboards

Sumo Logic Confidential

• Chart Types– Table– Bar– Column– Line– Area– Pie– Box Plot– Google Maps– Single Value

Providing Context through Visualization

Sumo Logic Confidential

– Live Dashboards• Provides a live stream of data• No back filling of data

– Interactive Dashboards• Search based (On-Demand)• Backfilling of data• Support Filtering

Dashboard Types

No Interaction

Ability to use Pre-defined

filters

Sumo Logic Confidential

Live Dashboards versus Interactive Dashboards

Use Case Examples Dashboard TypeLarge screen displays with streaming updates

Shared Screens for NOC, Operations, Developers.

Live Dashboards

Template for Exploring Data

Operational Investigations (i.e. Root cause analysis)

Interactive Dashboards

Historical Reporting and Investigation

Audits, Failed/successful logins for certain groups

Interactive Dashboards

Sumo Logic Confidential

Dashboards - Adding a Panel

1. Perform your Search

2. Format your Results

3. Create a Panel

Sumo Logic Confidential

Adding a Panel

Add Panel to existing Dashboard or type

new name for a new Dashboard

Sumo Logic Confidential

Editing Your Settings

Sumo Logic Confidential

Titles and Text Panels

Use titles and text panels to provide detail about the

dashboard and links to other relevant dashboards

Sumo Logic Confidential

Changing the Existing Panel Query

1. Edit your Search

2. Save back to Panel

Sumo Logic Confidential

Interactive Dashboard Properties

Select time range for individual panels

Select time range for all panels

Select filters for allpanels

Select filters for individual panels

Sumo Logic Confidential

• Filters allow for panels results to be limited dynamically

• Filters can be assigned at:– Dashboard level– Panel Level– Both Panel and Dashboard

• Filters can be string based or numeric– The * wildcard is supported for non-numeric filters– Numeric comparison operators supported: >,<,>=,<=

Interactive Dashboard - Filters

Sumo Logic Confidential

• Sumo Logic attempts to optimize Panels automatically when:– Users choose a time range > 6 hrs– Users attempt to share/publish a dashboard

• Optimized Panels can run in parallel improving efficiency; non-optimized Panels run serially

• Optimization Limitations– Only certain operators are supported by optimization– Queries > 6 hrs that cannot be optimized are not supported

• Dashboard Limitation– There are a few restricted operators when creating dashboards

Interactive Dashboard - Panel Optimization

Sumo Logic Confidential

Summary

Overview of Dashboards and Panels

Creating Dashboard Panels out of Charts

Live Dashboards versus Interactive Dashboards

Panel Optimization for Interactive Dashboards