Threat Type Distribution
Visualize threat types (Malware, Ransomware, Phishing) distribution within each time period.
Bar Chart type: multiple series, stacked bars.
Sample input data. Here is example input data for this scenario:
{"timestamp": "2025-08-11T00:01:23Z", "threat_type": "Malware", "host": "host1", "severity": "High"}
{"timestamp": "2025-08-11T00:01:24Z", "threat_type": "Ransomware", "host": "host2", "severity": "Critical"}
{"timestamp": "2025-08-11T00:01:25Z", "threat_type": "Phishing", "host": "host3", "severity": "Medium"}
{"timestamp": "2025-08-11T00:01:26Z", "threat_type": "Malware", "host": "host4", "severity": "High"}
{"timestamp": "2025-08-11T00:01:27Z", "threat_type": "Ransomware", "host": "host5", "severity": "Critical"}
Query. The query for outputting a Bar chart might look like this:
timeChart(
interval=1d,
function=count(),
series=threat_type
)
This query performs the following operations:
Creates a time-based visualization
Sets a time interval of 1 day (daily)
Counts events in each time bucket
Separates data into different series by threat type
The chart is useful for seeing how the different threats evolve over time, for tracking thread volumes and visualize different threat types comparison.