Dashboards & Visualizations

How to represent a Process Flow Diagram on a Splunk Dashboard?

SwatiApte
Path Finder

We want to represent the status of 10 stages within a process on a Dashboard, along with the ability to drill-down to the details of each of the stages on the same Dashboard. But instead of just showing the Status of the stages in the form of a Statistical table, we want to show a Process Flow Diagram consisting of a component for each of the 10 stages, over which the Status of each stage would be superimposed.

We do not want to represent them as 10 single-value components (running a search for each of these). Let us assume that we have the status for these stages derived and they are present in a kv store. Is there any way we could achieve this - reading the status of these stages and representing them as status icons on a single flow diagram?

Tags (3)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

An entirely alternative approach: Create your process flow diagram as an image, put it in the background of your dashboard, and place single values on the image where you want data to be displayed.

For an example check out Splunk's own Distributed Management Console, shipped since 6.2 and available at http://splunk:8000/en-US/app/splunk_management_console/indexing_performance_instance

0 Karma

koshyk
Super Champion

good question. I was also looking for the same, but couldn't find a D3.js based simple xml demo yet. ( I was looking for a organisational hierarchy kind of chart)

Another idea I thought is to use force graph or Sankey Chart (lots of examples) are there and overlapping the nodes with images/boxes. Its bit crude, but that's a suggestion

0 Karma

vinitatsky
Communicator

Based on the description, I think you can -
1) Create a multi value field for status and
2) Use eval function to evaluate different conditions.

I actually found this (which I think might be useful for you)
http://answers.splunk.com/answers/121450/flow-chart-in-sideview-utis.html

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...