Widgets in Workspaces
Widgets are the building blocks of Workspaces. A widget is a modular block that displays data or provides a control (for example, a chart, a table, a runbook output, or a filter picker). You add widgets to a workspace or to a Data Forensics panel, configure what data they use and how they look, and optionally connect them so that selections in one widget filter or update others.
Where widgets appear
Widgets appear in two places:
-
Workspaces Library: In the Library, a workspace is a grid of widgets on a canvas. You add widgets using Add Widgets, position and resize them, and configure each widget (Query, Filters, Visualization, and Interactions for Data Store widgets). Widgets can send or receive selections after you configure Interactions (for example, a table selection filters a chart).
-
Data Forensics: In Data Forensics, you add visualizations to panels below the main table. Each panel can contain widgets such as time series charts, correlation charts, or drilldown tables. Those widgets respond to selections in the main table or in panels above. The main table itself is not a widget in the same sense. It is fed by group bys
In Workspaces Data Forensics, a dimension (e.g. application, host, service, client IP) that you choose from the sidebar to load data into the main table. Data is aggregated or broken down by that dimension. The sidebar lists available group bys for the selected analysis workspace. from the sidebar.
Types of widgets
Widget types include data and analysis widgets (for example, Data Store, Metric Categories, Metadata Search, Vantage Point), runbook and automation widgets (for example, Runbook, Daily Runbook Runs), impact and incident widgets (for example, Impacted Locations and Services, Hourly Incident Backlog), and content widgets (for example, Text). Which widgets are available depends on your environment, feature flags, and connected data sources
A product in your network that forwards data to the system. This data can be streaming data used to detect anomalies and generate incidents, or data that can be fetched on demand when runbooks are executed.. For a full list and a short description of each, see List of Widgets.
Configuration and interactions
Many widgets can be configured after you add them. You open the widget menu (ellipsis on the widget header) and click Configure. Configuration options vary by widget: the Data Store widget uses a multistep dialog (Query, Filters, Visualization, and Interactions), while other widgets may have a single dialog (for example, name and content for the Text widget). For the common flow, see Configuring Workspaces Widgets. For widget-specific steps, use the links in List of Widgets.
In the Workspaces Library, widgets can interact after you configure a source widget to send Group, Metric, Top Metric, or Time to target widgets. For how to set up interactions, see Library Widget Interactivity. For designing large interactive canvases, see Designing Interactive Workspaces in the Library.