Charts FAQ

How do I create a chart?

How do I edit an existing chart?

Click on the chart title and select Edit. You edit a chart with the chart-building tool called the Metric Explorer. In the Metric Explorer, you select a source, protocol metrics to display from that source, and a chart type.

Which chart type should I select to compare data?

Which chart type should I select to observe changes over time?

When should I create a box plot, candlestick, or histogram chart?

When should I create a heatmap?

A heatmap displays a distribution of percentiles over time. You can only view timing metrics such as server processing time and round trip time in a heatmap. For example, a heatmap is useful for identifying concentrations of high server latency at a specific time.

What are maximum, minimum, and average rates?

Network byte and packet data can be displayed in a chart as a maximum, minimum and average per second rate. The Rate Summary in a chart displays these three rates together.

Configuring a chart to display the Rate Summary is only available for high-precision metrics, where metric data is aggregated into 1-second intervals. In the ExtraHop system, high-precision metrics are Network Bytes and Network Packets. For more information, see Display a rate or count in a chart.

Can I add trend lines to my chart?

You can add a dynamic baseline to your chart. A baseline is essentially a trend line that is calculated based on historical data. Baselines help you distinguish between normal and abnormal activity in your chart data.

The ExtraHop system does not begin calculating a dynamic baseline until the setting is enabled from the Options tab in the Metric Explorer. Therefore, dynamic baselines only appear for time periods that occur after the baseline was enabled. For more information, see Add a dynamic baseline to a chart.

You can also add a static threshold line to your chart. A threshold line helps you determine if activity is falling above or below a specific value, which is helpful for monitoring service level agreement (SLA) compliance. For more information, see Add a static threshold line to a chart

How do I add a rate to my chart?

Count metrics, such as errors, requests, and responses, are displayed as total counts in charts by default. But you can also display these metrics as a rate in a chart.

Below the metric name in the Metric Explorer, click Count, and select the type of rate to display.

For more information, see Display a rate or count in a chart.

How do I change the units in my chart?

Click the Options tab when editing a chart in the Metric Explorer. You can change units from bytes to bits, linear to log scale, or from the decimal prefix (1,000 bytes) to binary prefix (1,024 bytes). You can also abbreviate values in bar, value, and list chart types.

How do I change a chart name?

Click the chart title and select Rename.

How do I change the labels in my chart?

You can rename metric labels that appear in the legend for most charts. Click on the metric label in the chart and select Rename. This option is not available for box plot, candlestick, heatmaps, or status chart types.

Why do I see icons on some of my charts?

Hover over the detection marker to view the name of the identified detection, and then click the detection marker to navigate to the detail page for the detection for further investigation.

If multiple detections occur at approximately the same time, the marker displays the number of detections. Click the marker to display the list of detections, and click a detection title to navigate to the detail page.

If detections markers are not displayed on your charts as expected, check for the following issues:

• Your ExtraHop system is not licensed for the ExtraHop Machine Learning Service, which is required before you can see detections.
• Detections markers might be disabled. You can enable or disable detection markers from the User menu.
• You might be viewing a chart that does not support detection markers. Only the following chart types can display detection markers:
  • Area
  • Line
  • Column
  • Line & column

Why do I see Incompatible selections when I hover over a chart type?

Some chart types are only compatible with certain types of metrics. When editing a chart, you might see an Incompatible selections message as you hover over a chart type. This message means that the metric you already selected is incompatible with the chart type.

These chart types are only compatible with timing metrics such as server processing time and round trip time.

Why is there no data in my chart?

There might not be activity for the source or protocol metric you selected for your chart during the time interval you selected. Adjust the time interval to see if data appears in your chart.

If you are not seeing the traffic you are expecting, contact ExtraHop Support for help.