Graph types

Each chart type supports various graph types that you can use to display data.

The network configuration files determine the colors that the charts use to depict network traffic. Each IP address is depicted by using a unique color. The following table provides examples of how network and security data is used in charts. The table describes the chart types that are available for each type of graph.

Table 1. Graph types
Graph type Available chart types
Line
  • Events/Logs
  • Flows
  • Connections
  • Vulnerabilities
Stacked Line
  • Events/Logs
  • Flows
  • Connections
  • Vulnerabilities
Bar
  • Events/Logs
  • Flows
  • Asset Vulnerabilities Connections
  • Connections
  • Vulnerabilities
Horizontal Bar
  • Top Source IPs
  • Top Offenses
  • Offenses Over Time
  • Top Destination IPs
Stacked Bar
  • Events/Logs
  • Flows
  • Connections
Pie
  • Events/Logs
  • Flows
  • Asset Vulnerabilities
  • Connections
  • Vulnerabilities
Table
  • Events/Logs
  • Flows
  • Top Source IPs
  • Top Offenses
  • Offenses Over Time
  • Top Destination IPs
  • Connections
  • Vulnerabilities

To display content in a table, you must design the report with a full page width container.

Aggregate Table

Available with the Asset Vulnerabilities chart.

To display content in a table, you must design the report with a full page width container.

The following graph types are available for QRadar Log Manager reports:
  • Line
  • Stacked Line
  • Bar
  • Stacked Bar
  • Pie
  • Table
Note: When you create bar and stacked bar graph reports, the legend is presented in a fixed format and the bars or bar sections are represented by color coded labels in most cases. If you select time as the value for the x axis, you can create time intervals on the x axis.