Widgets in Workspaces
Widgets are the building blocks of Workspaces. A widget is a modular block that displays data or provides a control (e.g. a chart, a table, a runbook output, a filter picker). You add widgets to a workspace or to a Data Forensics panel, configure what data they use and how they look, and optionally connect them so that selections in one widget filter or update others.
Where widgets appear
Widgets appear in two places:
-
Workspaces Library: In the Library, a workspace is a grid of widgets on a canvas. You add widgets via Add Widgets, position and resize them, and configure each widget (data source, visualization, interactions). Widgets can send or receive selections (e.g. a table selection filters a chart).
-
Data Forensics: In Data Forensics, you add visualizations to panels below the main table. Each panel can contain widgets such as time series charts, correlation charts, or drilldown tables. Those widgets respond to selections in the main table or in panels above. The main table itself is not a widget in the same sense. It is fed by group bys
In Workspaces Data Forensics, a dimension (e.g. application, host, service, client IP) that you choose from the sidebar to load data into the main table. Data is aggregated or broken down by that dimension. The sidebar lists available group bys for the selected analysis workspace. from the sidebar.
Types of widgets
Widget types include data and analysis widgets (e.g. Data Store, Metric Categories, Metadata Search, Vantage Point), runbook and automation widgets (e.g. Runbook, Daily Runbook Runs), impact and incident widgets (e.g. Impacted Locations and Services, Hourly Incident Backlog), and content widgets (e.g. Text). Which widgets are available depends on your environment, feature flags, and connected data sources
A product in your network that forwards data to the system. This data can be streaming data used to detect anomalies and generate incidents, or data that can be fetched on demand when runbooks are executed.. For a full list and a short description of each, see List of Widgets.
Configuration and interactions
Many widgets can be configured after you add them. You open the widget menu (ellipsis on the widget header) and click Configure. Configuration options vary by widget: the Data Store widget uses a multistep dialog (query, visualization, interactions), while other widgets may have a single dialog (e.g. name and content for the Text widget). For the common flow, see Configuring a Widget. For widget-specific steps, use the links in List of Widgets.
In the Workspaces Library, widgets can interact. When you configure a widget to accept a group, metric, or time interaction, selections in another widget can filter or drive the data it displays. For how to set up interactions, see Library Widget Interactivity.