Filtering and Interactions in Data Forensics

This topic describes how filtering and selections work in Data Forensics. Filters and selections propagate from top to bottom: a selection in the main table or in a panel affects all panels and widgets below it. Use that top-down propagation to narrow the scope of your investigation step by step.

How filter propagation works

Tip: Filters stack. You can narrow down results by interacting with multiple elements in sequence.

In Data Forensics, cascading works as follows:

  • Top-down filtering: Each panel is filtered by all the selections made in the panels above it.

  • Value selection in tables: Clicking on a value in a table widget filters all panels and widgets below it.

  • Widget-specific filters: Selecting a time range within a widget or panel applies that filter to all related visualizations.

Time range filters

Dragging across a time series chart within a panel lets you define a custom time window. Subordinate panels and widgets can update to reflect that time range. You can also set the selection as the global workspace time range or zoom only that chart; see Set Global Time Range from a Time Chart.

When multiple Time chart widgets are visible, moving the pointer over one chart shows a vertical cursor line on each chart at the same time, which helps you compare metrics at a single timestamp. For more information, see Synchronized vertical cursor on multiple time charts in Data Store Visualization Types.

Widget-based filtering actions

Widgets support interactive options that trigger deeper analysis:

  • Time Series and Correlation charts respond to selected items in the parent table.

  • Drilldown opens a group-by selector and displays filtered results in a new table.

  • Response Time Composition shows breakdowns for the chosen item only.