Timeboards have automatic layouts, and represent a single point in time—either fixed or real-time—across the entire dashboard. They are commonly used for troubleshooting, correlation, and general data exploration.
Event Correlation refers to overlaying events on top of a dashboard graph. You can set up correlation at two different times: when you set up the dashboard, or ad-hoc when you view the dashboard.
Set up event correlation at design time by editing any graph on both Timeboards and Screenboards and adding events to the graph. You can find details about adding events using the UI or via the JSON interface further down the page.
Set up event correlation at view time by clicking the Search Events or Logs link in the upper left, then select Events. Next, type a query in the search box. This replaces any events added at design time, but applies the events to all graphs on that particular dashboard as an overlay.
Click on the Search Events or Logs link in the upper left, then select Logs. Next, type a query in the search box. This overlays the frequency of logs on your timeseries widgets. Click on an individual log line to view its full content.
Fast and easy correlation is key when troubleshooting an issue. Use the following shortcut from any dashboard timeseries graph to open a contextual menu with the most related logs.
View related logs to jump to the Log Explorer page zoomed on the selected timeframe with the current context of your graph.
To define the most related logs, the following parameters are used:
sourceattribute with the same integration name.
An Administrator or Timeboard creator can make a Timeboard read-only by clicking the gear icon (upper right corner of a Timeboard) and clicking the Permissions link:
Click “Yes” on the confirmation window to make the Timeboard read-only
Only account administrators and the Timeboard creator can activate read-only mode for a Timeboard. Any user in the organization, regardless of administrator privileges, can sign up to receive change notifications for a particular Timeboard.
If a user decides to track changes for a Timeboard, the following Timeboard changes are reported to the user through an event in the event stream:
In order to prevent the above listed changes, an administrator (account administrators or Timeboard creator) can activate read-only view disabling all non-administrator user edits to any tiles or text in the Timeboard, as well as Timeboard deletion.
Even in read-only mode, non-administrator users can still clone the Timeboard, rearrange the tiles, snapshot each tile, and view the tile in full screen. Any tile rearrangement by a non-administrator user does not persist if the Timeboard is set to read-only.
A user can find all events related to changes to the Timeboard they are following by searching
tags:audit, <Timeboard_name> in the main event stream, as each notification event is tagged with those two tags.
In dashboards, notifications provide the ability to track changes for audit purposes. Any changes made creates an event in the event stream that explains the change and displays the user that made the actual change.
See changes with the following event search:
This feature can be enabled by following these steps:
At the top right corner of a dashboard, click on the gear icon:
Select Notifications option and enable the notifications:
Additional helpful documentation, links, and articles: