Want to visualize your data? Take advantage of the latest features in Sumo Logic Dashboards - with a simple click, you now have the ability to toggle between a live stream of data (i.e a Dashboard displayed in your Ops Center) to an interactive dashboard suited for troubleshooting and data investigation.

1. Sumo Logic Confidential
Creating Charts and Dashboards
Mario Sánchez
May 2016
How-To Webinar Welcome.
To give everyone a
chance to successfully
connect, we’ll start at
10:05 AM Pacific.

2. Sumo Logic Confidential
Agenda
Get an overview of Dashboards and Panels
Learn to create Dashboard Panels
Learn to chart your data
Learn how to use Dashboards and its Features
Filters, Drilldowns
Live Mode
Live Mode

3. Sumo Logic Confidential
Sumo Logic Data Flow
Data Collection Search & Analyze Visualize & Monitor
Alerts
Dashboards
Collectors
Sources
Operators
Charts
1 2 3

4. Sumo Logic Confidential
Collection of Panels that
provide graphical
representation of data
• Each Panel processes results
of a single search
• Additional Analysis: Drilldown
into corresponding query or
another Dashboard
Intro to Dashboards

5. Sumo Logic Confidential
• Chart Types
– Table
– Bar
– Column
– Line
– Area
– Pie
– Box Plot
– Google Maps
– Single Value
Providing Context through Visualization

6. Sumo Logic Confidential
• Search based (On-Demand)
• Backfilling of data
• Support Filtering
Dashboard Features
Select Time
Range for all
PanelsAbility to use
Pre-defined
filters
Select filters for
individual panels
Select time range
for individual
panels

7. Sumo Logic Confidential
• Filters allow for panels results to be limited dynamically
• Filters can be assigned at:
– Dashboard level, Panel Level or both
• Filters can be string based or numeric
– The * wildcard is supported for non-numeric filters
– Numeric comparison operators supported: >,<,>=,<=
Filtering

8. Sumo Logic Confidential
• Live Mode
– Provides a live stream of data
– No Back filling of data
Dashboard Features
Toggle Live
Mode

9. Sumo Logic Confidential
Live versus Interactive Mode
Use Case Examples Dashboard
Type
Large screen displays
with streaming updates
Shared Screens for NOC,
Operations, Developers.
Live Mode
Template for Exploring
Data
Operational Investigations (i.e. Root
cause analysis)
Interactive
Mode
Historical Reporting
and Investigation
Audits, Failed/successful logins for
certain groups
Interactive
Mode

10. Sumo Logic Confidential
Dashboards - Adding a Panel
1. Perform your
Search
2. Format your
Results
3. Create a
Panel

11. Sumo Logic Confidential
Adding a Panel
Add Panel to existing
Dashboard or type
new name for a new
Dashboard

12. Sumo Logic Confidential
Editing Your Settings

13. Sumo Logic Confidential
Titles and Text Panels
Use Title and Text
Panels to provide
detail about the
dashboard and links
to other relevant
dashboards

14. Sumo Logic Confidential
Changing the Existing Panel Query
1. Edit your
Search
2. Save back to
Panel

15. Sumo Logic Confidential
Optimizing Live Mode
• Dashboards in Live Mode have Constant Query (CQ) running in background to serve results quickly
• CQ is kept alive as long as Dashboard is viewed once every 30 days
• Limitations: There are a few operators that don’t support Live Mode
Optimizing Interactive Mode
• Dashboards in Interactive Mode attempt to optimize Panels automatically when:
– Users choose a time range > 6 hours
– Users publish a dashboard
• Optimized Panels can run in parallel improving efficiency; non-optimized Panels run serially
• Limitations: There are a few operators that don’t support optimization.
Dashboard Panel Optimization

16. Sumo Logic Confidential
Summary
Overview of Dashboards and Panels
Creating Dashboard Panels out of Charts
Dashboards with Live Mode
Panel Optimization

17. Sumo Logic Confidential
Questions?
Consume Training
sumologic.com/training
Read Documentation
help.sumologic.com
Search/Post to Community
community.sumologic.com
Open a Support Case
support.sumologic.com
Log a Feature Request
sumologic.ideas.aha.io/ideas

18. Sumo Logic Confidential
Thank you!