Sumo Logic Confidential

Creating Charts and Dashboards

Mario SánchezMay 2016

How-To Webinar Welcome.To give everyone a

chance to successfully connect,

we’ll start at10:05 AM Pacific.

Sumo Logic Confidential

Agenda

Get an overview of Dashboards and PanelsLearn to create Dashboard Panels

Learn to chart your data

Learn how to use Dashboards and its FeaturesFilters, DrilldownsLive ModeLive Mode

Sumo Logic Confidential

Sumo Logic Data Flow

Data Collection Search & Analyze

Visualize & Monitor

Alerts

Dashboards

Collectors

Sources

Operators

Charts

1 2 3

Sumo Logic Confidential

Collection of Panels that provide graphical representation of data

• Each Panel processes results of a single search

• Additional Analysis: Drilldown into corresponding query or another Dashboard

Intro to Dashboards

Sumo Logic Confidential

• Chart Types– Table– Bar– Column– Line– Area– Pie– Box Plot– Google Maps– Single Value

Providing Context through Visualization

Sumo Logic Confidential

• Search based (On-Demand)• Backfilling of data• Support Filtering

Dashboard Features

Select Time Range for all

PanelsAbility to use Pre-defined filters

Select filters for individual panels

Select time range for

individual panels

Sumo Logic Confidential

• Filters allow for panels results to be limited dynamically • Filters can be assigned at:

– Dashboard level, Panel Level or both• Filters can be string based or numeric

– The * wildcard is supported for non-numeric filters– Numeric comparison operators supported: >,<,>=,<=

Filtering

Sumo Logic Confidential

• Live Mode– Provides a live stream of data– No Back filling of data

Dashboard Features

Toggle Live Mode

Sumo Logic Confidential

Live versus Interactive ModeUse Case Examples Dashboard

TypeLarge screen displays with streaming updates

Shared Screens for NOC, Operations, Developers.

Live Mode

Template for Exploring Data

Operational Investigations (i.e. Root cause analysis)

Interactive Mode

Historical Reporting and Investigation

Audits, Failed/successful logins for certain groups

Interactive Mode

Sumo Logic Confidential

Dashboards - Adding a Panel1. Perform

your Search

2. Format your Results

3. Create a Panel

Sumo Logic Confidential

Adding a Panel

Add Panel to existing Dashboard or type new name

for a new Dashboard

Sumo Logic Confidential

Editing Your Settings

Sumo Logic Confidential

Titles and Text Panels

Use Title and Text Panels to provide detail about the dashboard and links to other

relevant dashboards

Sumo Logic Confidential

Changing the Existing Panel Query

1. Edit your Search

2. Save back to Panel

Sumo Logic Confidential

Optimizing Live Mode• Dashboards in Live Mode have Constant Query (CQ) running in background to serve results quickly

• CQ is kept alive as long as Dashboard is viewed once every 30 days

• Limitations: There are a few operators that don’t support Live Mode

Optimizing Interactive Mode• Dashboards in Interactive Mode attempt to optimize Panels automatically when:

– Users choose a time range > 6 hours– Users publish a dashboard

• Optimized Panels can run in parallel improving efficiency; non-optimized Panels run serially

• Limitations: There are a few operators that don’t support optimization.

Dashboard Panel Optimization

Sumo Logic Confidential

Summary

Overview of Dashboards and PanelsCreating Dashboard Panels out of ChartsDashboards with Live ModePanel Optimization

Sumo Logic Confidential

Questions?

Consume Trainingsumologic.com/training

Read Documentationhelp.sumologic.com

Search/Post to Communitycommunity.sumologic.com

Open a Support Casesupport.sumologic.com

Log a Feature Requestsumologic.ideas.aha.io/ideas

Sumo Logic Confidential

Thank you!