Visualizing data and creating dashboards

In this tutorial we will cover exploring data using Query Analyzer, creating a pane and building a dashboard. In the following example we will be showing data from a dummy data set from firewall logs. You can follow the same steps with any type of data that are integrated in your Raven team.

Exploring Your Data

1. In the navigation bar go to Insights > Query Analyzer.

2. Use SQL or PRQL to query data from all tables in your Raven team - we will be using SQL in the following example.

3. For this tutorial, we'll focus on the fortigate_firewall_logs table.

For more information on querying, see the Query Analyzer documentation. Query Analyzer

Example query:

SELECT * FROM fortigate_firewall_logs;

Creating Visualizations

1. After running your query, scroll down to the Visualize Results section.

2. Choose a chart type from the available options, filtered by category, family, and type.

3. For this example, we'll create a simple bar chart:

   • Select the bar chart icon to open the no-code chart builder.

   • Drag 'rcvdbyte' to the Value parameter and select 'sum' as the aggregation.

   • Drag 'appcat' to the Columns parameter.

4. Save your visualization as a pane:

   • Click "Save Pane"

   • Set a title and refresh interval (cron)

For cron syntax help, see here

Building Your Dashboard

1. Open the Dashboards app.

2. Select an existing dashboard or create a new one.

3. Add your pane:

   • Click the "Add Pane" option at the bottom of the dashboard.

   • Drag and drop your saved pane onto the dashboard.

   • Edit the pane by right-clicking or double-clicking.

4. Repeat to add multiple panes.

5. Save your dashboard when finished.

Your dashboard will be accessible to all team members within your Raven team. You can also export it to PDF using the provided option.

By following these steps, you'll create insightful visualizations and comprehensive dashboards to enhance your data analysis in Raven.