New Feature: Results Indicator Gauge
See Intelligence-Led Security In Action Attend a Live Product Demo

New Feature: Results Indicator Gauge

August 16, 2013 • Caroline Flannery

Across many intelligence domains, customers have asked for search feedback about how many of the total search matches are included in the visible result set – the events shown in the timeline, map, etc.

For a narrow query, all the matching events are included in the visualization. For a general query that matches thousands of events, the visualization is limited to a sample of the most relevant results. It’s useful to have feedback so you can decide whether to drill down with a more specific query.

Visualizations now include a new indicator gauge showing an estimate of the visible result set, in terms of percentage of references. The gauge appears in the lower right hand corner. Mouse over the small indicator to expand.

Results Indicator Gauge

By clicking on the indicator, you can raises the query limit. This is the same action as clicking “Show more” in the advanced query dialog.

Note: The percentage is an estimate — but you’re *at least* seeing the displayed percentage.

New call-to-action

Related Posts

Using Intelligence to Prioritize AWS Guard Duty Alerts

Using Intelligence to Prioritize AWS Guard Duty Alerts

March 10, 2021 • Meghan McGowan

Security operations teams are inundated with alerts and threats making it difficult for them to...

Announcing Security Intelligence for Splunk — For Free

Announcing Security Intelligence for Splunk — For Free

February 23, 2021 • Ellen Wilson

Today, we’re thrilled to announce the launch of a free 30-day trial of our integration for Splunk...

Special Delivery: Recorded Future Hunting Packages

Special Delivery: Recorded Future Hunting Packages

September 25, 2019 • The Recorded Future Team

Quickly detecting and preventing malicious activity is imperative to effectively protecting your...