Number Widget

A numerical value widget displays an important metric for single glance analysis.

Field Description
Query Enter a search query. Enter USE to start an EQL statement or SELECT to start an SQL statement. You can search based on filter and time Bloks as well.
Date & Time You can enter absolute and relative time ranges.

For example, enter -5h as a relative time range to display results that occur in the last 5 hours.

Show value of Choose the column name from the list.
Unit label Choose the appropriate option or enter the desired unit.
Description Enter the widget description this is displayed below the number.
Threshold If the Threshold check box is selected, then you can define the threshold value. The color on the chart depends on the threshold values.
  • When the number is less than or equal to the minimum threshold value, the color changes to green.
  • When the number is greater than the minimum threshold value but less than or equal the maximum threshold value, the color changes to yellow.
  • When the number is higher than the maximum threshold value, the color changes to red.
Auto refresh Click the slider to ON to refresh the widget. By default, it is set to OFF.
Refresh widget every If Auto refresh is set to ON, enter a time interval in seconds to refresh the widget. Refresh action starts after the data is completely retrieved and displayed.

Example

For the search query:
use LogLogic_Appliance | COLUMNS count(*)
the threshold value is set to 10000.