📢 Read the latest Release Notes to learn what's new on Hunters! 💡

Build widgets in Search

Prev Next

Every dashboard widget is built on the Search page, in SQL mode: run a query, then select Create Widget. Widgets are not available in Builder mode or in notebooks.

Create Widget

Which columns you can pick

The pickers do not read the database schema. They classify columns from a sample of up to 100 result rows:

  • Only columns your SELECT returns are offered. To make a column selectable, add it to the query.
  • Time columns appear only under Group By → Time, and are never offered for aggregation.
  • Sum, Min, Max and Avg offer only numeric columns. Count unique offers every column.
  • Ratio exists only on the Gauge chart type.
The preview is not the widget

The preview is computed in your browser from the sample rows. It is not the same computation as the finished widget, and it can group differently. Use it to check the layout; check the numbers on the created widget.

Bar charts: sort and limit

A Bar chart grouped by a field gets Sort bars by value and Number of bars. They are available with no series split, or with a split measured by Sum, Count or Count unique.

Sort Bars kept by the limit
Descending or Off The largest
Ascending The smallest

Bars past the limit are dropped, not grouped into "Other". On a split chart, the limit keeps whole categories.

Split bars stack only for Sum, Count and Count unique. Avg, Min and Max render side by side, because a stacked average is meaningless.

Limits

Data points A chart with more than 1,500 points shows Chart cannot be displayed. Use Number of bars or a coarser grouping.
Time resolution minute, hour, day, month, year. There is no week.
Pivot columns The column axis is capped at 200 values (RAW Data and OCSF Data) or 100 (Analytics). A notice appears above the grid when the cap is hit. A time-bucketed pivot keeps the earliest buckets.
Table rows A Table widget shows at most 1,000 rows.

Tables can rename any column; Pivots can rename only their row-axis columns. Table and Pivot cells show up to 2 decimal places, or up to 4 for small values.

Add to dashboard

Widgets in the Widgets area are not saved. Use ⋮ → Add to dashboard to keep one.

Add to dashboard

  • The list shows only dashboards you created. To add a widget to someone else's dashboard, open that dashboard and select Make a copy first. Type a new name to create a dashboard.
  • Time column is the column the dashboard's time range will filter. Choose None to make the widget ignore the time range.
Don't filter time in the SQL as well

If your SQL filters on the time column you nominate, the two filters stack and the dashboard can only narrow the range, never widen it. Leave the range open in SQL and let the dashboard control it.

Edit Query edits the dashboard's copy

A dashboard widget's ⋮ → Edit Query opens its SQL on the Search page. This is the widget's private copy, not your original saved query, and it is not listed in the Query Library. Saving takes you back to the dashboard and updates only that widget.

If the dashboard has a cached result less than 24 hours old, Search shows that result first, under the banner Showing results from a cached run…. Select Run Query to get fresh data.