All Apps and Add-ons

Sankey sorting

Lucas_K
Motivator

Is there a method to sort sankey by the largest cumulative item in the left side group?

I'm doing some throughput analysis and I i'm displaying volume between two nodes and we need to see it arranged from biggest to smallest.

I've tried doing a cumulative total and sorting on that.
The stats table I produce is in the correct order but the sankey makes its own determination that I can't figure out.
I've sorted through every available field and can't figure out what it is using as a sort.

alt text

0 Karma

kiril123
Path Finder

It should be possible to develop a custom command in Splunk which sorts Tree segments in the desired order and then pass the output to a Sankey diagram for visualisation.

This is my attempt to develop a custom sorting:
https://github.com/kirilb1/Tree_Traversals

0 Karma

magnew_splunk
Splunk Employee
Splunk Employee

@Lucas K

I just came across your question. We do not support sorting in the current version of the Sankey, but I have filed your feature request for consideration in the future. Let us know if you found a way to do it that was good enough for you. Someone else might be interested.

Thanks for the feedback!

joshualarkins
Explorer

I would also be very interested in this feature.

0 Karma

chrzz
Observer

Hi! Any updates on this? We would also like the sort feature to be implemented.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...