Create or update a treemap indicator

You can modify the predefined indicators for a treemap category or create new indicators. For each indicator, you can configure its data source and specify how lists of security incidents are opened from treemaps that are viewed with the indicator.

Before you begin

Role required: sn_si.admin

The treemaps use performance analytics as the data source. The Performance Analytics module requires a separate plugin.

Procedure

  1. Open the treemap definition that you want to configure indicators for.
    Treemap definitionAction
    Service impact treemap Navigate to Security Incident > Administration > Service Impact Definition.
    Real-time treemap Navigate to Security Incident > Administration > Real-time Definition.
  2. In the Treemap Categories related list, select the category that you want to configure indicators for.
  3. In the Treemap Indicators related list, select an indicator to modify or click New to create a new indicator.
  4. Fill in the fields.
    Table 1. Treemap Indicator form
    Field Description
    Name The name that is displayed for the indicator in the Indicators list on the service impact dashboard.
    Short description A description that is displayed for the indicator in the Indicators list above the treemap.
    Result limit The maximum number of results allowed. The upper limit is 100.
    Result Precision The number of digits to display after the decimal point.

    This field is displayed for the real-time treemap definition only.

    Active Check box to activate this indicator.
    Category The category name entered on the previous screen.
    Direction Indicates whether the tile on the treemap is minimized or maximized.

    This field is displayed for the real-time treemap definition only.

    Unit The unit of measure to be used for the metric.

    This field is displayed for the real-time definition only.

    Automatic Refresh Interval How frequently to refresh the treemap.
    Order The order the indicator appears in the Indicators list above the treemap.
  5. Click the Data Source Configuration tab and configure one of the following data source options for the indicator.
    OptionAction
    Performance analytics Select Performance Analytics from the Data source field, then make the following entries:
    • Indicator: The indicator used to group the PA data.
    • Default breakdown: The default breakdown used to break the selected PA indicator into multiple parts.
    Custom script Select Custom Script from the Data Source field. Then use the HTML editor to customize the script as needed. The result of running the script must be an array in order for the information to display in the treemap.
    Query conditions Select Query Condition from the Data Source field, and then make the following entries:
    • Query table: The base table to be queried.
    • Aggregate type: The type of aggregate (SUM, COUNT, AVG, MIN, MAX) to be used.
    • Aggregate field: The field to be used by the query.
    • Group by: The field to sort the queried data.
    Note: To enhance the query, click Add Filter Condition and Add "OR" Clause.
  6. Click the Click Through tab, and specify how lists of security incidents are opened from the treemap.
    1. In the Click through URL navigation type field, select whether you want the list of security incidents to open in a new window, in the same window, or in a dialog box.
    2. (Optional) In the Click through URL script field, modify the sample script if needed.
  7. Click Submit or Update.