zui icon indicating copy to clipboard operation
zui copied to clipboard

Histogram is Back in Zui

Open jameskerr opened this issue 1 year ago • 0 comments

Add back the histogram to Zui.

  • [x] Grab the correct span from the query.
  • [ ] Conditionally render the histogram for zeek pools only.
  • [ ] Determine and store the fact that a pool is a zeek pool.
  • [ ] Brushing the histogram updates the zed query or the from pin.
  • [x] Add a range picker to the from pin that we can update from the histogram brushes.
  • [ ] Add an option to hide the histogram even for zeek pools

We could add tags to a pool that could be used to determine features. We could add a form on the pool page to determine if something is a zeek log.

api.editor.setRange(lower, upper)
if (pool.tags.include("zeek"))

Think about configuring the histogram with colors for types and things.

When rendering, look at the time pool key to use it in the query.

jameskerr avatar Aug 03 '22 23:08 jameskerr