All Apps and Add-ons

Sankey Diagram - Increase limit of tooltip source and targets

chrisabell
New Member

I am using Sankey to track source and targets using both status code errors and counts. It works fine however I would like to know how to lift the limit of 3 items in the group along with the totals for "Others". The rollup is hiding data which I would like to see in the tooltip.

0 Karma

chrisabell
New Member

I found the following in sankey_diagram.js.

//Sort and only allow top 3 and put the rest in "Others" bucket.
var MAX_TOOLTIP_VALUES = 3;

By changing that value you can get more results however the Viz does not really balance without making significant changes. It works if you double it however it starts getting too big.

Also, it does not help by hooking it up to a variable in the general tab as the tooltip rendering is not really designed to be dynamic. It would take some work to make that happen.

That being said I have my immediate answer and when I find the time I will investigate further.

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...