Building New Workflows in Data Forensics

This topic walks you through building a Data Forensics workflow step by step. You will isolate and explore an issue by adding panels and visualizations that respond to your selections. The example below shows how to drill into the top servers for a specific application An entity type representing software applications deployed in the customer environment that are monitored for performance and anomalies. over a selected time frame.

Drill down to top servers of a single application in a specific time frame

1. Drag the Application group by In Workspaces Data Forensics, a dimension (e.g. application, host, service, client IP) that you choose from the sidebar to load data into the main table. Data is aggregated or broken down by that dimension. The sidebar lists available group bys for the selected analysis workspace. from the sidebar into the Main Table Pane (or double-click it). The table fills with application data.

2. Click a row in the table to select an application (for example, one of the top applications).

3. In the panel below the table, click the Time Chart button in the panel toolbar to add a time series chart for the selection.

4. Add a new panel if needed (for example, Add New Panel at the bottom of the page).

5. In the new panel, open the Drilldown menu in the panel toolbar and select Server to add a table that drills down to top servers for the selected application.

6. In the time chart panel, drag across a time range to narrow the window. Widgets in panels below update to that range.

This workflow helps identify which servers contribute most to application traffic during a performance window. You can continue to refine the panels, add filters, or create new visualizations as needed.