In my logs - I have session id and page id ..
I want to see users' Navigation chart..
Please guide.
Hi @reverse,
Sankey can be found here :
https://splunkbase.splunk.com/app/3112/
And resources on how to use it is here :
https://docs.splunk.com/Documentation/SankeyDiagram/1.3.0/SankeyDiagramViz/SankeyIntro
Do you need help writing your SPL ?
Cheers,
David
Hi @reverse,
Sankey can be found here :
https://splunkbase.splunk.com/app/3112/
And resources on how to use it is here :
https://docs.splunk.com/Documentation/SankeyDiagram/1.3.0/SankeyDiagramViz/SankeyIntro
Do you need help writing your SPL ?
Cheers,
David
Yes please
Hi @reverse, sure thing, please share one line of logs as an example so we can build your search for Sankey. As shown here :
https://docs.splunk.com/Documentation/SankeyDiagram/1.3.0/SankeyDiagramViz/SankeySearchDataFormat
your search should look like this :
... | stats <stats_function>(<size_field>) [<stats_function>(<color_field>)] by <source_category_field> <target_category_field>
Hi @reverse, what do you need the chart to look like ?
Like sankey
@reverse you will have to provide more details like your data sample and existing query for us to assist you better. Please mock/anonymize any sensitive information.
The Sankey Custom Visualization also comes with sample query which you can refer to, in order to come up with your own query.