Loading...

Changing the Chart Type in the System Monitoring Application

After performing a search operation, the Search page displays the number of events in a bar chart. You can change the chart by adding commands to your search.

Use the following table to determine the type of chart you want to view.

Pie Chart Time Chart
Syntax: yourSearchCriterion | graphtype pie fieldName

where:

Description: Displays the event percentage and count for the event property you defined in fieldName, for example, MonitoringPolicyName. If multiple values for fieldName are found, the 10 values with the most matching events are displayed.

Example: If you specify MonitoringPolicyName as the fieldName, the chart displays the number of events that occurred for each monitoring policy. See the following sample chart for a graphical illustration:

Syntax:
  • yourSearchCriterion | graphtype timechart count by fieldName
  • yourSearchCriterion | graphtype timechart min|max|avg(integerFieldName) by fieldName

where:

Description:

  • count by syntax: Displays the event count for the event property you defined in fieldName, for example, ClientName.
  • min|max|avg syntax: Displays the minimum, maximum, or average number of integerFieldName for the event property you defined in fieldName, for example, avg(PID) by ClientName.

If multiple values for fieldName are found, the 10 values with the most matching events are displayed. The chart provides the number of events that occurred at every hour for a fixed number of days.

Example: If you specify ClientName as the "count by" fieldName, the chart displays the number of events that occurred for the clients at every hour across eight days. See the following sample chart for a graphical illustration:

Donut Chart Comparison Chart
Syntax: yourSearchCriterion | graphtype donut fieldName1, fieldName2

where:

Description: Displays the event percentage and count for the event property you defined in fieldName2 based on fieldName1, for example, TemplateName and MonitoringPolicyName. If multiple values for fieldName2 are found, the five values with the most matching events based on fieldName1 are displayed.

In the donut chart, the inner circle shows the events for fieldName1 and the outer circle shows the events for fieldName2.

Example: If you specify TemplateName as fieldName1 and MonitoringPolicyName as fieldName2, the chart displays the number of events that occurred for the monitoring policies, based on the monitoring policy templates. See the following sample chart for a graphical illustration:

Syntax:
  • yourSearchCriterion | graphtype compare n
  • yourSearchCriterion | graphtype compare min|max|avg(integerFieldName), min|max|avg(integerFieldName)

where:

Description:

  • compare n syntax: Compares the number of events you defined in n, for example, 5. The events depend on your search criterion.
  • min|max|avg syntax: Compares the minimum, maximum, or average number of integerFieldName with another minimum, maximum, or average number of integerFieldName for the events from your search criterion, for example, min(JobId), max(JobId).

The chart provides the events in a time line.

Example: If you specify 2 as n, the chart compares two events over the course of eight days. See the following sample chart for a graphical illustration:

You can analyze, monitor, and compare large amounts of data from multiple clients in your environment by using the Comparison Chart.

For more information, see Monitoring and Comparing Activity Monitoring and Resource Usage Data Using Graphs.

Field Names

A fieldName is an event property that you can capture from an event. Most field names are based on the filters that you can see on the lower left corner of the Search page.

Before you type the fieldName next to the command to change the chart, the Search bar displays a list of available field names that you can use. The list might vary based on the monitoring policy templates being processed.