SlideShare a Scribd company logo
1 of 8
Download to read offline
Use Cases
Create Report
ACTOR: Report Developer



                               e.g.
                     Request   bandwidth utilization of
                      report   internet connections




                                        alt - want to do
                                         a variation of
                                        existing report
                Create new
                  report


                                           Select
                                           report




                               example
                 Create /
                               table / chart / graph
                  modify
                  report
                 content


                               where content goes (which
                               column, alignment, etc.)
                     Create
                     report
                     layout




                     Publish
                      report




                     Review
                     report




                                                                          Manager / Executive

                                                                          Report Developer




         Use Cases                                         Beth Goldman, User Experience Manager | June 2008
Use Cases
Create Report | CREATE REPORT CONTENT


                                             Find data /
                                               specify
                                              data set




 Identify what                                                                                      Identify what
                                              alt - chose
  the content                               existing report                                         you're trying
                               OR                                              OR
  should look    e.g. bar chart showing #      template        e.g. trend over time, or top level   to show with
      like       users / host                                  distribution, or comparison           the content



 Map fields to                               alt - just want                                          Identify
                                             raw results /
    axes                                      tabular data                                             fields

                                              Select
 Format label                                option to
  and chart                                  show raw
  graphics/                                   results
    colors




     Done




                                                                                                      Report Developer



            Use Cases                                          Beth Goldman, User Experience Manager | June 2008
Use Cases
Create Report Content | MAP FIELDS
 Map field to
   x-axis




 format time                                     alt - x-axis is                 alt - x-axis
     axis                                       categorical (e.g.                  field is              alt - table
                     SCALE: limit time            top referrer)                  continuous
  (time-based        range to where
 binning option,     data exists OR
      scale          show more time.
                                                 format data (#
                                                to show, ,sorting
                                                                                  Select                format data
                                                   options (e.g.                  binning                 (row sort
                                                   frequency),                    options                   order)
                                                    groupings)




 Map field(s)                 alt - want more info      alt - want to split y-          alt - want
  to Y-axis                    than just count on
                                 y-axis + field is
                                                          axis by another
                                                        field (e.g. stacked            scatterplot /
                                     numeric                    bar)                   multi-values

                                 Specify                     Select                   Specify what
                               function(s)                  another                    values to
                                 avg, min,                  field for                   display
                                 max, sum                     split                      (TBD)

                                                            Specify
                                                            function
                                                           avg, min,
                                                           max, sum

                                                                                                                    - # values to display (sum time vs.
                                                       Select series                                               max time OR select specific
                                                          policy                                                   values), how to aggregate "other",
                                                                                                                   what to do with null values
                                                                                                                   (suppress?)


   Review
   content



 Format label                                                                        alt - Too many
                                                                                    values on x or y
  and chart                                                                          axis or z (split
  graphics/                                                                                 by)
    colors



          alt - scatter
                                 alt - table
           plot chart


        Set additional         Set additional                  Refine #                                  Remove
          properties             properties                     values                                    specific
                              column size, row                                           + / OR
         (color, size,         height, labels,               displayed on                                 values
           shape)                   etc.                      x or y-axis                                (outliers)
                                                                                                                                 Report Developer



             Use Cases                                                                Beth Goldman, User Experience Manager | June 2008
Use Cases
      Create Report Content | FIND/SPECIFY DATA
                                                      what about
      ACTOR: Report Developer                         users?


                   Identify
                and search
                                                                                                           alt - select
                for key field
                                                            OR                                            existing data
                 value(s) -                                                                                     set
                  to detail
                  (slicing)
modify search




                                                                                                            Select
                                based on source
                                                                                                           existing       new search OR
                   Ensure                            exception -                                           data set       saved search OR
                                name / ID                             exception -
                  data that     e.g. net flows       data source         data                              (e.g.ss)       saved search +
                I'm looking                                                                                               changes
                                                      not there       incomplete
                for is there
                    and
                 complete
                                                     Request to                              based on
                                                      add data            TBD                expected volume,
                                                       source                                sanity checks
                Ensure 1:1
                correspond        (filter out
                   ence           irrelevant and
                 between          group and name
                                  dup data (status
                 incidents        code != 200
                and events



                Verify that
                                 project by viewing it as a
                 data is in
                                 summary table, chart
                  results
                                 graph, etc. when building,
                (e,g. bytes
                                 if I can't find... - exception
                  trans.)



                                                                     exception -
                  Ensure                                                data not
                  data is                                             interpreted
                                                                    correctly / fully
                reportable /
                 available
                 as a field
                                 limitation of splunk
                                                                    Request to
                                                                     add data
                                exception -
                                data fields
                                 not there




                                Request to        also could modify search
                                 add data         to extract addn'l fields
                                   field

                                                                                                       Report Developer




                          Use Cases                                                     Beth Goldman, User Experience Manager | June 2008
Use Cases
     Create Report | CREATE REPORT LAYOUT
     ACTOR: Report Developer




         Position              Create       Create
          report       +       report   +   report
         content               header       footer
UPDATE




         Review
         Report




                                                                    Report Developer




                  Use Cases                          Beth Goldman, User Experience Manager | June 2008
Use Cases
Create Report | PUBLISH REPORT
ACTOR: Report Developer



    Identify
     report
   reviewers



                                 alt - want to make                alt - decide to             alt - save
                                report available for                 save entire               (dynamic
                                users to run/view at   AND / OR   report for re-use          timeframe /
                                       any time
    Send                                                           with other data              values)
    report

                         Schedule                                     Create
                                               Add report to                                  save/
                         report for                                   unique
                                                 relevant                                    sched////
                         recurring             dashboard(s)          template
                                                                                               TBD
                          delivery                                     name



                                                                       Save
                                                                    template
                                                                    (format &
                                   Notify users
                                   about new                         content)
                                     report




                                                                                      Report Developer




             Use Cases                                            Beth Goldman, User Experience Manager | June 2008
Use Cases
Review Report
ACTOR: Manager / Executive


    Receive
  notification
   that report
  is available




    Open /
  view report




    Review
     data




                 alt - identify                      alt - identify
                  business                           problem with
                     issue                               report


                                  alt - drill-down      Ask report
              Follow up with       to get more        developer to
                 relevant               info?          fix / update
              employees to
                                                     report content
               investigate
                                                          and/or
               and resolve
                                                         tempalte




    Close
    report




                                                                              Manager / Executive




             Use Cases                                         Beth Goldman, User Experience Manager | June 2008
Use Cases
Create Report | CREATE REPORT CONTENT


                                             Find data /
                                               specify
                                              data set




 Identify what                                                                                      Identify what
                                              alt - chose
  the content                               existing report                                         you're trying
                               OR                                              OR
  should look    e.g. bar chart showing #      template        e.g. trend over time, or top level   to show with
      like       users / host                                  distribution, or comparison           the content



 Map fields to                               alt - just want                                          Identify
                                             raw results /
    axes                                      tabular data                                             fields

                                              Select
 Format label                                option to
  and chart                                  show raw
  graphics/                                   results
    colors




     Done




                                                                                                      Report Developer



            Use Cases                                          Beth Goldman, User Experience Manager | June 2008

More Related Content

Viewers also liked

SplunkLive! Splunk for Insider Threats and Fraud Detection
SplunkLive! Splunk for Insider Threats and Fraud DetectionSplunkLive! Splunk for Insider Threats and Fraud Detection
SplunkLive! Splunk for Insider Threats and Fraud DetectionSplunk
 
Visualizing the Insider Threat: Challenges and tools for identifying maliciou...
Visualizing the Insider Threat: Challenges and tools for identifying maliciou...Visualizing the Insider Threat: Challenges and tools for identifying maliciou...
Visualizing the Insider Threat: Challenges and tools for identifying maliciou...Phil Legg
 
Splunk .conf2011: Splunk for Fraud and Forensics at Intuit
Splunk .conf2011: Splunk for Fraud and Forensics at IntuitSplunk .conf2011: Splunk for Fraud and Forensics at Intuit
Splunk .conf2011: Splunk for Fraud and Forensics at IntuitErin Sweeney
 
Business Track: MetLife Leapfrogs Insurance Industry with MongoDB-Powered Big...
Business Track: MetLife Leapfrogs Insurance Industry with MongoDB-Powered Big...Business Track: MetLife Leapfrogs Insurance Industry with MongoDB-Powered Big...
Business Track: MetLife Leapfrogs Insurance Industry with MongoDB-Powered Big...MongoDB
 
Threat Hunting
Threat HuntingThreat Hunting
Threat HuntingTripwire
 
Rapidly Improving Security Posture - CanDeal
Rapidly Improving Security Posture - CanDealRapidly Improving Security Posture - CanDeal
Rapidly Improving Security Posture - CanDealSplunk
 
SplunkLive! Milano 2016 - customer presentation - Unicredit
SplunkLive! Milano 2016 -  customer presentation - UnicreditSplunkLive! Milano 2016 -  customer presentation - Unicredit
SplunkLive! Milano 2016 - customer presentation - UnicreditSplunk
 
Data Mining with Splunk
Data Mining with SplunkData Mining with Splunk
Data Mining with SplunkDavid Carasso
 
Insider Threat Kill Chain: Detecting Human Indicators of Compromise
Insider Threat Kill Chain: Detecting Human Indicators of CompromiseInsider Threat Kill Chain: Detecting Human Indicators of Compromise
Insider Threat Kill Chain: Detecting Human Indicators of CompromiseTripwire
 
Insider threat event presentation
Insider threat event presentationInsider threat event presentation
Insider threat event presentationIISPEastMids
 
Single View of Customer in Banking
Single View of Customer in BankingSingle View of Customer in Banking
Single View of Customer in BankingRajeev Krishnan
 
Single View of the Customer
Single View of the Customer Single View of the Customer
Single View of the Customer MongoDB
 
Delivering business value from operational insights at ING Bank
Delivering business value from operational insights at ING BankDelivering business value from operational insights at ING Bank
Delivering business value from operational insights at ING BankSplunk
 
Softcat Splunk Discovery Day Manchester, March 2017
Softcat Splunk Discovery Day Manchester, March 2017Softcat Splunk Discovery Day Manchester, March 2017
Softcat Splunk Discovery Day Manchester, March 2017Splunk
 
Detecting-Preventing-Insider-Threat
Detecting-Preventing-Insider-ThreatDetecting-Preventing-Insider-Threat
Detecting-Preventing-Insider-ThreatMike Saunders
 

Viewers also liked (15)

SplunkLive! Splunk for Insider Threats and Fraud Detection
SplunkLive! Splunk for Insider Threats and Fraud DetectionSplunkLive! Splunk for Insider Threats and Fraud Detection
SplunkLive! Splunk for Insider Threats and Fraud Detection
 
Visualizing the Insider Threat: Challenges and tools for identifying maliciou...
Visualizing the Insider Threat: Challenges and tools for identifying maliciou...Visualizing the Insider Threat: Challenges and tools for identifying maliciou...
Visualizing the Insider Threat: Challenges and tools for identifying maliciou...
 
Splunk .conf2011: Splunk for Fraud and Forensics at Intuit
Splunk .conf2011: Splunk for Fraud and Forensics at IntuitSplunk .conf2011: Splunk for Fraud and Forensics at Intuit
Splunk .conf2011: Splunk for Fraud and Forensics at Intuit
 
Business Track: MetLife Leapfrogs Insurance Industry with MongoDB-Powered Big...
Business Track: MetLife Leapfrogs Insurance Industry with MongoDB-Powered Big...Business Track: MetLife Leapfrogs Insurance Industry with MongoDB-Powered Big...
Business Track: MetLife Leapfrogs Insurance Industry with MongoDB-Powered Big...
 
Threat Hunting
Threat HuntingThreat Hunting
Threat Hunting
 
Rapidly Improving Security Posture - CanDeal
Rapidly Improving Security Posture - CanDealRapidly Improving Security Posture - CanDeal
Rapidly Improving Security Posture - CanDeal
 
SplunkLive! Milano 2016 - customer presentation - Unicredit
SplunkLive! Milano 2016 -  customer presentation - UnicreditSplunkLive! Milano 2016 -  customer presentation - Unicredit
SplunkLive! Milano 2016 - customer presentation - Unicredit
 
Data Mining with Splunk
Data Mining with SplunkData Mining with Splunk
Data Mining with Splunk
 
Insider Threat Kill Chain: Detecting Human Indicators of Compromise
Insider Threat Kill Chain: Detecting Human Indicators of CompromiseInsider Threat Kill Chain: Detecting Human Indicators of Compromise
Insider Threat Kill Chain: Detecting Human Indicators of Compromise
 
Insider threat event presentation
Insider threat event presentationInsider threat event presentation
Insider threat event presentation
 
Single View of Customer in Banking
Single View of Customer in BankingSingle View of Customer in Banking
Single View of Customer in Banking
 
Single View of the Customer
Single View of the Customer Single View of the Customer
Single View of the Customer
 
Delivering business value from operational insights at ING Bank
Delivering business value from operational insights at ING BankDelivering business value from operational insights at ING Bank
Delivering business value from operational insights at ING Bank
 
Softcat Splunk Discovery Day Manchester, March 2017
Softcat Splunk Discovery Day Manchester, March 2017Softcat Splunk Discovery Day Manchester, March 2017
Softcat Splunk Discovery Day Manchester, March 2017
 
Detecting-Preventing-Insider-Threat
Detecting-Preventing-Insider-ThreatDetecting-Preventing-Insider-Threat
Detecting-Preventing-Insider-Threat
 

Similar to Create SEO-optimized report content

Access presentation
Access presentationAccess presentation
Access presentationDUSPviz
 
Graphs and waveforms.ppt
Graphs and waveforms.pptGraphs and waveforms.ppt
Graphs and waveforms.pptAvinashJain66
 
Budthimedhee - Input2012
Budthimedhee - Input2012Budthimedhee - Input2012
Budthimedhee - Input2012INPUT 2012
 
285109443-SAP-BW-Info-Object.ppt
285109443-SAP-BW-Info-Object.ppt285109443-SAP-BW-Info-Object.ppt
285109443-SAP-BW-Info-Object.pptntrnbk
 
Ariba Knowledge Nuggets - Contract Management: Creating an Analytical Report
Ariba Knowledge Nuggets - Contract Management: Creating an Analytical ReportAriba Knowledge Nuggets - Contract Management: Creating an Analytical Report
Ariba Knowledge Nuggets - Contract Management: Creating an Analytical ReportSAP Ariba
 
FBSIC Functionalities Matrix (Annexes)
FBSIC Functionalities Matrix (Annexes)FBSIC Functionalities Matrix (Annexes)
FBSIC Functionalities Matrix (Annexes)Fernando Gil
 
Manual to basic gis
Manual to basic gisManual to basic gis
Manual to basic gisQust04
 
COGNOS ONLINE TRAINING
COGNOS ONLINE TRAININGCOGNOS ONLINE TRAINING
COGNOS ONLINE TRAININGTRAINING ICON
 
Map Making with QGIS - Part II
Map Making with QGIS - Part IIMap Making with QGIS - Part II
Map Making with QGIS - Part IISagar Arlekar
 
Cosmos Data Visualisation - Visualisations Palette
Cosmos Data Visualisation - Visualisations PaletteCosmos Data Visualisation - Visualisations Palette
Cosmos Data Visualisation - Visualisations PaletteKicktag Web Solutions Ltd
 
Chapter 2 basic element of programming
Chapter 2 basic element of programming Chapter 2 basic element of programming
Chapter 2 basic element of programming Zul Aiman
 
Comm645 gephi handout
Comm645   gephi handoutComm645   gephi handout
Comm645 gephi handoutSadaf Solangi
 

Similar to Create SEO-optimized report content (14)

Access presentation
Access presentationAccess presentation
Access presentation
 
Graphs and waveforms.ppt
Graphs and waveforms.pptGraphs and waveforms.ppt
Graphs and waveforms.ppt
 
Budthimedhee - Input2012
Budthimedhee - Input2012Budthimedhee - Input2012
Budthimedhee - Input2012
 
285109443-SAP-BW-Info-Object.ppt
285109443-SAP-BW-Info-Object.ppt285109443-SAP-BW-Info-Object.ppt
285109443-SAP-BW-Info-Object.ppt
 
Ariba Knowledge Nuggets - Contract Management: Creating an Analytical Report
Ariba Knowledge Nuggets - Contract Management: Creating an Analytical ReportAriba Knowledge Nuggets - Contract Management: Creating an Analytical Report
Ariba Knowledge Nuggets - Contract Management: Creating an Analytical Report
 
FBSIC Functionalities Matrix (Annexes)
FBSIC Functionalities Matrix (Annexes)FBSIC Functionalities Matrix (Annexes)
FBSIC Functionalities Matrix (Annexes)
 
Manual to basic gis
Manual to basic gisManual to basic gis
Manual to basic gis
 
COGNOS ONLINE TRAINING
COGNOS ONLINE TRAININGCOGNOS ONLINE TRAINING
COGNOS ONLINE TRAINING
 
Map Making with QGIS - Part II
Map Making with QGIS - Part IIMap Making with QGIS - Part II
Map Making with QGIS - Part II
 
Cosmos Data Visualisation - Visualisations Palette
Cosmos Data Visualisation - Visualisations PaletteCosmos Data Visualisation - Visualisations Palette
Cosmos Data Visualisation - Visualisations Palette
 
Chapter 2 basic element of programming
Chapter 2 basic element of programming Chapter 2 basic element of programming
Chapter 2 basic element of programming
 
On metadata for Open Data
On metadata for Open DataOn metadata for Open Data
On metadata for Open Data
 
Comm645 gephi handout
Comm645   gephi handoutComm645   gephi handout
Comm645 gephi handout
 
Arcgis training day_1
Arcgis training day_1Arcgis training day_1
Arcgis training day_1
 

More from Beth Goldman

User Experience @InsideView
User Experience @InsideViewUser Experience @InsideView
User Experience @InsideViewBeth Goldman
 
InsideView | UI Screens + Notes
InsideView | UI Screens + NotesInsideView | UI Screens + Notes
InsideView | UI Screens + NotesBeth Goldman
 
Splunk | Reporting Final Comps
Splunk | Reporting Final CompsSplunk | Reporting Final Comps
Splunk | Reporting Final CompsBeth Goldman
 
Splunk | Save Report Use Cases
Splunk | Save Report Use CasesSplunk | Save Report Use Cases
Splunk | Save Report Use CasesBeth Goldman
 
Splunk | Charting Rules
Splunk | Charting RulesSplunk | Charting Rules
Splunk | Charting RulesBeth Goldman
 
Splunk | Reporting Usability Tasks
Splunk | Reporting Usability TasksSplunk | Reporting Usability Tasks
Splunk | Reporting Usability TasksBeth Goldman
 
Splunk | Reporting - Concepts 1
Splunk | Reporting - Concepts 1Splunk | Reporting - Concepts 1
Splunk | Reporting - Concepts 1Beth Goldman
 
Splunk | Reporting - Concepts 2
Splunk | Reporting - Concepts 2Splunk | Reporting - Concepts 2
Splunk | Reporting - Concepts 2Beth Goldman
 
Splunk | Change Management App Wireframes
Splunk | Change Management App WireframesSplunk | Change Management App Wireframes
Splunk | Change Management App WireframesBeth Goldman
 
Splunk | LDAP & Role Mapping Use Cases
Splunk | LDAP & Role Mapping Use CasesSplunk | LDAP & Role Mapping Use Cases
Splunk | LDAP & Role Mapping Use CasesBeth Goldman
 
Splunk | UI Messaging Spec
Splunk | UI Messaging SpecSplunk | UI Messaging Spec
Splunk | UI Messaging SpecBeth Goldman
 
Splunk | Reporting - Usability Wireframes
Splunk | Reporting - Usability WireframesSplunk | Reporting - Usability Wireframes
Splunk | Reporting - Usability WireframesBeth Goldman
 
Intuit | Husky Ui Spec
Intuit | Husky Ui SpecIntuit | Husky Ui Spec
Intuit | Husky Ui SpecBeth Goldman
 
Splunk | Topology ID & VisD Updates
Splunk | Topology ID & VisD UpdatesSplunk | Topology ID & VisD Updates
Splunk | Topology ID & VisD UpdatesBeth Goldman
 
Splunk | Use Case Training
Splunk | Use Case TrainingSplunk | Use Case Training
Splunk | Use Case TrainingBeth Goldman
 
Y! Travel | Optimization Project Goals
Y! Travel | Optimization Project GoalsY! Travel | Optimization Project Goals
Y! Travel | Optimization Project GoalsBeth Goldman
 
Y! Travel | UE Optimization Summary
Y! Travel | UE Optimization SummaryY! Travel | UE Optimization Summary
Y! Travel | UE Optimization SummaryBeth Goldman
 
Y! Travel UE Schedule
Y! Travel UE ScheduleY! Travel UE Schedule
Y! Travel UE ScheduleBeth Goldman
 
Intuit | Husky Design Review Presentation
Intuit | Husky Design Review PresentationIntuit | Husky Design Review Presentation
Intuit | Husky Design Review PresentationBeth Goldman
 
Y! Travel | Research Synthesis
Y! Travel | Research SynthesisY! Travel | Research Synthesis
Y! Travel | Research SynthesisBeth Goldman
 

More from Beth Goldman (20)

User Experience @InsideView
User Experience @InsideViewUser Experience @InsideView
User Experience @InsideView
 
InsideView | UI Screens + Notes
InsideView | UI Screens + NotesInsideView | UI Screens + Notes
InsideView | UI Screens + Notes
 
Splunk | Reporting Final Comps
Splunk | Reporting Final CompsSplunk | Reporting Final Comps
Splunk | Reporting Final Comps
 
Splunk | Save Report Use Cases
Splunk | Save Report Use CasesSplunk | Save Report Use Cases
Splunk | Save Report Use Cases
 
Splunk | Charting Rules
Splunk | Charting RulesSplunk | Charting Rules
Splunk | Charting Rules
 
Splunk | Reporting Usability Tasks
Splunk | Reporting Usability TasksSplunk | Reporting Usability Tasks
Splunk | Reporting Usability Tasks
 
Splunk | Reporting - Concepts 1
Splunk | Reporting - Concepts 1Splunk | Reporting - Concepts 1
Splunk | Reporting - Concepts 1
 
Splunk | Reporting - Concepts 2
Splunk | Reporting - Concepts 2Splunk | Reporting - Concepts 2
Splunk | Reporting - Concepts 2
 
Splunk | Change Management App Wireframes
Splunk | Change Management App WireframesSplunk | Change Management App Wireframes
Splunk | Change Management App Wireframes
 
Splunk | LDAP & Role Mapping Use Cases
Splunk | LDAP & Role Mapping Use CasesSplunk | LDAP & Role Mapping Use Cases
Splunk | LDAP & Role Mapping Use Cases
 
Splunk | UI Messaging Spec
Splunk | UI Messaging SpecSplunk | UI Messaging Spec
Splunk | UI Messaging Spec
 
Splunk | Reporting - Usability Wireframes
Splunk | Reporting - Usability WireframesSplunk | Reporting - Usability Wireframes
Splunk | Reporting - Usability Wireframes
 
Intuit | Husky Ui Spec
Intuit | Husky Ui SpecIntuit | Husky Ui Spec
Intuit | Husky Ui Spec
 
Splunk | Topology ID & VisD Updates
Splunk | Topology ID & VisD UpdatesSplunk | Topology ID & VisD Updates
Splunk | Topology ID & VisD Updates
 
Splunk | Use Case Training
Splunk | Use Case TrainingSplunk | Use Case Training
Splunk | Use Case Training
 
Y! Travel | Optimization Project Goals
Y! Travel | Optimization Project GoalsY! Travel | Optimization Project Goals
Y! Travel | Optimization Project Goals
 
Y! Travel | UE Optimization Summary
Y! Travel | UE Optimization SummaryY! Travel | UE Optimization Summary
Y! Travel | UE Optimization Summary
 
Y! Travel UE Schedule
Y! Travel UE ScheduleY! Travel UE Schedule
Y! Travel UE Schedule
 
Intuit | Husky Design Review Presentation
Intuit | Husky Design Review PresentationIntuit | Husky Design Review Presentation
Intuit | Husky Design Review Presentation
 
Y! Travel | Research Synthesis
Y! Travel | Research SynthesisY! Travel | Research Synthesis
Y! Travel | Research Synthesis
 

Create SEO-optimized report content

  • 1. Use Cases Create Report ACTOR: Report Developer e.g. Request bandwidth utilization of report internet connections alt - want to do a variation of existing report Create new report Select report example Create / table / chart / graph modify report content where content goes (which column, alignment, etc.) Create report layout Publish report Review report Manager / Executive Report Developer Use Cases Beth Goldman, User Experience Manager | June 2008
  • 2. Use Cases Create Report | CREATE REPORT CONTENT Find data / specify data set Identify what Identify what alt - chose the content existing report you're trying OR OR should look e.g. bar chart showing # template e.g. trend over time, or top level to show with like users / host distribution, or comparison the content Map fields to alt - just want Identify raw results / axes tabular data fields Select Format label option to and chart show raw graphics/ results colors Done Report Developer Use Cases Beth Goldman, User Experience Manager | June 2008
  • 3. Use Cases Create Report Content | MAP FIELDS Map field to x-axis format time alt - x-axis is alt - x-axis axis categorical (e.g. field is alt - table SCALE: limit time top referrer) continuous (time-based range to where binning option, data exists OR scale show more time. format data (# to show, ,sorting Select format data options (e.g. binning (row sort frequency), options order) groupings) Map field(s) alt - want more info alt - want to split y- alt - want to Y-axis than just count on y-axis + field is axis by another field (e.g. stacked scatterplot / numeric bar) multi-values Specify Select Specify what function(s) another values to avg, min, field for display max, sum split (TBD) Specify function avg, min, max, sum - # values to display (sum time vs. Select series max time OR select specific policy values), how to aggregate "other", what to do with null values (suppress?) Review content Format label alt - Too many values on x or y and chart axis or z (split graphics/ by) colors alt - scatter alt - table plot chart Set additional Set additional Refine # Remove properties properties values specific column size, row + / OR (color, size, height, labels, displayed on values shape) etc. x or y-axis (outliers) Report Developer Use Cases Beth Goldman, User Experience Manager | June 2008
  • 4. Use Cases Create Report Content | FIND/SPECIFY DATA what about ACTOR: Report Developer users? Identify and search alt - select for key field OR existing data value(s) - set to detail (slicing) modify search Select based on source existing new search OR Ensure exception - data set saved search OR name / ID exception - data that e.g. net flows data source data (e.g.ss) saved search + I'm looking changes not there incomplete for is there and complete Request to based on add data TBD expected volume, source sanity checks Ensure 1:1 correspond (filter out ence irrelevant and between group and name dup data (status incidents code != 200 and events Verify that project by viewing it as a data is in summary table, chart results graph, etc. when building, (e,g. bytes if I can't find... - exception trans.) exception - Ensure data not data is interpreted correctly / fully reportable / available as a field limitation of splunk Request to add data exception - data fields not there Request to also could modify search add data to extract addn'l fields field Report Developer Use Cases Beth Goldman, User Experience Manager | June 2008
  • 5. Use Cases Create Report | CREATE REPORT LAYOUT ACTOR: Report Developer Position Create Create report + report + report content header footer UPDATE Review Report Report Developer Use Cases Beth Goldman, User Experience Manager | June 2008
  • 6. Use Cases Create Report | PUBLISH REPORT ACTOR: Report Developer Identify report reviewers alt - want to make alt - decide to alt - save report available for save entire (dynamic users to run/view at AND / OR report for re-use timeframe / any time Send with other data values) report Schedule Create Add report to save/ report for unique relevant sched//// recurring dashboard(s) template TBD delivery name Save template (format & Notify users about new content) report Report Developer Use Cases Beth Goldman, User Experience Manager | June 2008
  • 7. Use Cases Review Report ACTOR: Manager / Executive Receive notification that report is available Open / view report Review data alt - identify alt - identify business problem with issue report alt - drill-down Ask report Follow up with to get more developer to relevant info? fix / update employees to report content investigate and/or and resolve tempalte Close report Manager / Executive Use Cases Beth Goldman, User Experience Manager | June 2008
  • 8. Use Cases Create Report | CREATE REPORT CONTENT Find data / specify data set Identify what Identify what alt - chose the content existing report you're trying OR OR should look e.g. bar chart showing # template e.g. trend over time, or top level to show with like users / host distribution, or comparison the content Map fields to alt - just want Identify raw results / axes tabular data fields Select Format label option to and chart show raw graphics/ results colors Done Report Developer Use Cases Beth Goldman, User Experience Manager | June 2008