Hello Splunkers,
I would like to show the user flow on Sankey visualization.For ,that i have index, source type ,interaction_id ,activity_id, screen_id flow_name ,component fields. In the component field, I have 2 values, one is APIGATEWAY and another one is ES. APIGATEWAY has some flow names and ES also has some flow names., there is a relation between those two flow name values.I need to get the relation between those flow names of APIGATEWAY to ES as two separate nodes or fields on Sankey visualization .* (Note: flow name (or) API name in APIGATEWAY that calls the another one or more flow name/API name
I have this query:
index=abc sourcetype=123 screen_id =xyz interaction_id=def |stats count by activity_id screen_id component flow_name|search flow_name!=""
Note: activity_id is different for all flow_names
Please suggest how to show the relation between APIGATEWAY and ES flow names on Sankey visualization
