Data Visualization in LogScale

Learn how to visualize data and choose the right widgets for your needs

Path 1

New to Data Visualization?

Start with the concepts

Learn what data visualization is and why it matters before creating dashboards and widgets. Understand the benefits of visualizing data, when to use dashboards versus tables, and how dashboards and widgets work together to transform raw log data into insights. Perfect for those new to data visualization in LogScale.

  • What is Data Visualization?
  • Dashboards versus Tables
Start Here Path 2

Ready to Create Dashboards and Widgets?

I know Data Visualization basics — show me how to create dashboards and widgets

You understand data visualization concepts and are ready to create dashboards and widgets. Jump into the complete workflow: create dashboards, add widgets, customize layouts, configure time settings, make dashboards interactive, and share with your team. Follows the step-by-step dashboard guide from planning through implementation.

  • Create Dashboard Framework
  • Add and Manage Widgets
  • Customize Layout and Time Settings
  • Make Dashboards Interactive
  • Share and Export Dashboards
Get Started Path 3

Choose Widgets by Data Format

Match your query output to the right widget type

Learn which widget type to use based on your query output data format. Covers time-series data, grouped data, relationship data, geographic data, single metrics, raw events, and correlation data. Each step shows required data fields, compatible query functions, and widget options for that data format.

  • Time-Series Data: Time Chart, Heat Map
  • Grouped Data: Bar Chart, Pie Chart, Table
  • Relationship Data: Sankey Diagrams
  • Geographic Data: World Maps
  • Single Metrics: Single Value, Gauge
Explore by Data Path 4

Choose Widgets by Use Case

Find the right widget for what you want to achieve

Learn which widget type to use based on your analysis goals and monitoring needs. Covers monitoring trends, comparing categories, showing proportions, displaying KPIs, visualizing patterns, tracking flows, mapping locations, analyzing correlations, and viewing detailed data. Each step focuses on a specific use case with widget recommendations.

  • Monitor Trends: Time Chart
  • Compare Categories: Bar Chart
  • Show Proportions: Pie Chart
  • Display KPIs: Single Value, Gauge
  • Track Flows: Sankey, World Map
Explore by Goal

Path 1: New to Data Visualization?

Build a solid understanding of data visualization concepts before you start creating dashboards and widgets. Learn what data visualization is, why it matters, and how LogScale helps you visualize log data.

1

Understanding Data Visualization

Learn what data visualization is and why transforming raw log data into visual representations helps you understand patterns, trends, and anomalies faster than scanning tables. Discover the advantages of visual representations

Data Visualization Overview

conceptbeginner

Introduction to data visualization in LogScale: how it transforms raw log data into actionable insights and the benefits of faster pattern recognition, real-time monitoring, and simplified communication
2

When to Use Dashboards versus Tables

Understand when to use dashboards and visualizations versus table results. Dashboards excel at monitoring and pattern spotting; tables excel at detailed investigation and exploration

Dashboards versus Tables

guidebeginner

Learn when to use dashboards for monitoring versus tables for detailed investigation

Path 2: Ready to Create Dashboards and Widgets?

Follow the complete step-by-step workflow for creating, customizing, and sharing dashboards with widgets. This workflow covers the entire dashboard lifecycle from planning through implementation.

1

Dashboard Creation Workflow

Follow the complete dashboard workflow from planning through implementation. Start by creating your dashboard framework through the creation interface

Step-by-Step Guide to Dashboards

guideintermediate

Complete workflow from defining purpose through sharing dashboards

Create Dashboard

guidebeginner

Navigate to dashboard creation interface and configure basic settings
2

Select and Add Widgets

Add widgets to your dashboard based on your data visualization needs. Choose the right widget type based on data format: Time Chart for time-series, Bar Chart for categories, Sankey for relationships, World Map for geographic data, Single Value for metrics

Widget Basics

conceptbeginner

Learn what widgets are and how they transform query results into visualizations

Create Widgets

guidebeginner

Learn how to create widgets from search queries and add them to dashboards

Widget Gallery

conceptintermediate

Browse all available widget types to choose the right visualization
3

Manage Dashboard and Widgets

Manage dashboards and widgets through menu options: export, clone, delete dashboards, grant permissions to new users, edit widget queries, modify widget styling, interactions, and properties. Access all dashboards across repositories and perform bulk operations

Manage Dashboard

guideintermediate

Manage dashboards through menu options for export, clone, delete, and permissions

Dashboard Operations

guideintermediate

Learn individual dashboard management operations

Dashboard Permissions

guideintermediate

Grant access to edit or delete dashboards for other users or groups

Manage Widgets

guideintermediate

Edit widget queries, modify styling and interactions, clone, export, or delete widgets

Widget Properties and Styling

conceptintermediate

Browse configurable properties and styling options for each widget type
4

Customize Dashboard

Style and customize the dashboard layout with edit options: change labels, colors, and formatting, set time intervals, and configure settings across multiple widgets

Customize Dashboard

guideintermediate

Style and customize dashboard layout with colors, labels, and formatting
5

Design Dashboard Layout

Organize dashboard layout with logical groups, visual hierarchy, and optimized space utilization. Arrange widgets in sections, add note widgets for context, and create parameter panels for interactive filtering

Design Layout

guideintermediate

Provide intuitive navigation through effective layout design and organization

Dashboard Sections

guideintermediate

Arrange widgets in logical groups using sections

Note Widgets

guideintermediate

Add context and guidance with note widgets

Parameter Panels

guideintermediate

Organize parameters into panels for easier user interaction

Dashboard Design Best Practices

guideintermediate

Best practices and ready-to-use templates for effective dashboards

Example: Multi-Widget Dashboard

exampleintermediate

See how one query can be visualized with multiple widget types
6

Configure Time Settings

Choose whether queries should be live or static, and adjust time controls at dashboard or widget level. Configure widget time picker, section time picker, live mode, and time zone settings

Configure Time Settings

guideintermediate

Choose whether queries should be live or static and adjust time controls

Widget Time Picker

guideintermediate

Configure time settings for individual widgets

Section Time Picker

guideintermediate

Configure time settings for dashboard sections

Default Time

guideintermediate

Set default time range for dashboards
7

Make Dashboard Interactive

Add interactive features: apply basic filters to filter data by specific criteria, implement parameters for dynamic data views, and configure interactions for drill-down capabilities

Interactive Dashboards

guideintermediate

Use dashboards interactively with filters, parameters, and interactions

Apply Basic Filters

guideintermediate

Filter data by specific criteria without editing queries

Implement Parameters

guideintermediate

Create parameter-based filtering for dynamic data views

Configure Interactions

guideintermediate

Configure drill-down and linking capabilities
8

Share Dashboards

Share dashboards with team members by granting access without allowing access to underlying data. Create wall monitor links for read-only displays on monitoring screens

Share Dashboards

guideintermediate

Grant access to dashboards and create wall monitor links
9

Export to PDF

Export dashboards to PDF format for archiving, printing, or distribution. Configure print options such as orientation, header content, and time window display. You can automate sending dashboard PDF snapshots by email using scheduled reports

Export to PDF

guideintermediate

Export dashboards in PDF format with customizable print options

Automate with Scheduled Reports

guideintermediate

Automate PDF generation and email delivery on a schedule
10

Implement Scheduled Reports

Generate formatted dashboard reports and configure automatic email sending to specified recipients based on customizable time intervals

Scheduled Reports

guideintermediate

Implement automated scheduled dashboard reports with email delivery

Path 3: Choose Widgets by Data Format

Learn which widget type to use based on your query output data format. Each step focuses on a specific data format and shows compatible widgets, required data fields, and query functions that produce that format.

1

Time-Series Data

For data with timestamp fields showing changes over time, use Time Chart for trends and Heat Map for temporal patterns with intensity. Time Chart requires timeChart() function output with automatic time bucketing. Heat Map works well with bucket() for grouping data into time or numeric buckets

Time Chart Widget

guideintermediate

Display temporal data along a timeline with automatic bucketing

Time Chart Data Format

guideintermediate

Understand data requirements and time bucketing for time charts

timeChart() Function

referenceintermediate

Create time-series visualizations with automatic bucketing

Heat Map Widget

guideintermediate

Display time-based data with color intensity showing magnitude

Heat Map Data Format

guideintermediate

Requires two grouping variables plus aggregate result

bucket() Function

referenceintermediate

Group data into time or numeric buckets for heat map visualization
2

Grouped and Aggregated Data

For categorical data grouped by one or more fields with aggregate counts or calculations, use Bar Chart for comparisons, Pie Chart for proportions, or Table for detailed breakdowns. Bar Chart and Table use groupBy() output; Pie Chart works well with top() for top N results; Table also accepts table() for multi-column structured output

Bar Chart Widget

guideintermediate

Display categorical data as rectangular bars for comparison

Bar Chart Data Format

guideintermediate

Single series for one metric, multiple series for comparisons or breakdowns

groupBy() Function

referenceintermediate

Group events by field values to create categorical breakdowns

Pie Chart Widget

guideintermediate

Display categorical data as proportional segments of a circle

Pie Chart Data Format

guideintermediate

Single pie or small multiples for multiple grouping fields

top() Function

referenceintermediate

Select top N results from grouped data for pie chart visualization

Table Widget

guideintermediate

Display detailed data in tabular format with sorting and filtering

Table Data Format

guideintermediate

Best with groupBy() or table() function for multiple columns

table() Function

referenceintermediate

Format query results as structured table output with multiple columns
3

Relationship and Flow Data

For data showing connections between entities with source-destination pairs, use Sankey widget to display flows and relationships. Requires source, target, and weight fields produced by sankey() function or manual field creation

Sankey Widget

guideintermediate

Display flow relationships and multi-step processes

Sankey Data Requirements

guideintermediate

Requires source, target, and weight fields for flow visualization

sankey() Function

referenceintermediate

Prepare source-destination data for Sankey diagrams
4

Geographic Data

For location-based data with IP addresses or coordinates, use World Map widget to display events geographically. Requires lat/lon fields or geohash produced by worldMap() and ipLocation() functions

World Map Widget

guideintermediate

Display events with geographical coordinates on an interactive map

World Map Data Format

guideintermediate

Requires latitude, longitude, and optional geohash and magnitude fields

worldMap() Function

referenceintermediate

Prepare geographic data for World Map visualization

ipLocation() Function

referenceintermediate

Enrich IP addresses with country, city, and coordinates
5

Single Values and KPIs

For single aggregated values or KPIs — numeric or non-numeric — use Single Value widget to prominently display the result or Gauge widget to show metrics against thresholds. Requires single-row, single-field output from functions like sum(), count(), avg(), select(), or selectLast()

Single Value Widget

guideintermediate

Display a single value or status indicator prominently

Single Value Data Format

guideintermediate

Requires single row with single field, supports trends with timeChart()

Gauge Widget

guideintermediate

Display metrics with visual thresholds and color-coded ranges

Gauge Data Format

guideintermediate

Single numeric value with customizable threshold ranges
6

Raw Event Data

For detailed log investigation showing individual events with all fields, use Event List widget to display raw event data. Shows @timestamp, @rawstring, and all extracted fields for detailed analysis

Event List Widget

guideintermediate

Display raw event data with timestamps and log lines

Event List Data Format

guideintermediate

Displays @timestamp, @rawstring, and @id fields by default
7

Correlation Data

For analyzing relationships between two or more numeric variables, use Scatter Chart widget to plot correlations. Supports wide format (X axis plus multiple Y series) or long format (group field plus X/Y values)

Scatter Chart Widget

guideintermediate

Display correlations between numeric variables

Scatter Chart Data Format

guideintermediate

Wide format for multiple series or long format for grouped data

Wide versus Long Format

guideintermediate

Understand the difference between wide and long data formats

Path 4: Choose Widgets by Use Case

Learn which widget type to use based on your analysis goals and monitoring needs. Each step focuses on a specific use case and recommends appropriate widgets with examples and configuration guidance.

1

Monitor Trends Over Time

When you need to track how metrics change over time, spot anomalies, or analyze trends, use Time Chart widget. Common use cases include performance monitoring, error rate tracking, resource utilization analysis, event frequency visualization, and trend forecasting

Time Chart Widget

guideintermediate

Display temporal data along a timeline with automatic bucketing

Time Chart Examples

guideintermediate

Browse examples of performance monitoring, error tracking, and trend analysis
2

Compare Categories

When you need to compare values across different categories or groups, use Bar Chart widget. Ideal for comparing single metrics across categories, showing multiple sub-categories side-by-side, or displaying composition over time with stacked bars

Bar Chart Widget

guideintermediate

Display categorical data as rectangular bars for comparison

Bar Chart Examples

guideintermediate

Browse examples of category comparisons, grouped data, and stacked visualizations
3

Show Proportions and Distributions

When you need to display part-to-whole relationships or show how categories contribute to the total, use Pie Chart widget. Best for showing distribution across a small number of categories, highlighting dominant segments, or using small multiples to compare distributions

Pie Chart Widget

guideintermediate

Display categorical data as proportional segments of a circle

Pie Chart Examples

guideintermediate

Browse examples of distribution analysis and proportion visualization
4

Display KPIs and Metrics

When you need to prominently display key performance indicators or metrics with thresholds, use Single Value widget for simple numeric display or Gauge widget for threshold-based monitoring. Common use cases include executive dashboards, monitoring screens, and alert status displays

Single Value Widget

guideintermediate

Display a single numeric metric or status indicator prominently

Single Value Examples

guideintermediate

Browse examples of KPI displays, trend indicators, and status summaries

Gauge Widget

guideintermediate

Display metrics with visual thresholds and color-coded ranges

Gauge Examples

guideintermediate

Browse examples of resource utilization, vulnerability progress, and error monitoring
5

Visualize Patterns and Intensity

When you need to see patterns across two dimensions with color intensity showing magnitude, use Heat Map widget. Best for temporal patterns showing when activity peaks occur, or two-dimensional aggregations revealing hot spots in your data

Heat Map Widget

guideintermediate

Display data with color intensity showing magnitude

Heat Map Examples

guideintermediate

Browse examples of temporal patterns and two-dimensional aggregations
6

Track Flows and Relationships

When you need to visualize how data flows between entities or track relationships over multiple steps, use Sankey widget. Common use cases include user journey analysis, network traffic flows, attack path tracking, and service dependency mapping

Sankey Widget

guideintermediate

Display flow relationships and multi-step processes

Sankey Examples

guideintermediate

Browse examples of traffic flows, user journeys, and process visualization
7

Map Geographic Data

When you need to visualize location-based patterns or understand geographic distribution, use World Map widget. Common use cases include security threat geography, user distribution analysis, regional performance monitoring, and location-based incident tracking

World Map Widget

guideintermediate

Display events with geographical coordinates on an interactive map

World Map Examples

guideintermediate

Browse examples of geographic security monitoring and regional analysis
8

Analyze Correlations

When you need to find relationships between two or more numeric variables or identify patterns in multi-dimensional data, use Scatter Chart widget. Common use cases include performance correlation analysis, resource usage patterns, and identifying outliers in metric relationships

Scatter Chart Widget

guideintermediate

Display correlations between numeric variables

Scatter Chart Examples

guideintermediate

Browse examples of correlation analysis and pattern identification
9

View Detailed Data

When you need to examine exact field values, investigate individual events, or present structured data with multiple columns, use Table widget for aggregate results with sorting and filtering, or Event List widget for raw log investigation with full event details

Table Widget

guideintermediate

Display detailed data in tabular format with sorting and filtering

Event List Widget

guideintermediate

Display raw event data with timestamps and log lines

Example: Combining Visualizations with Tables

exampleintermediate

See how to combine visual widgets with detailed data tables