Data lineage solution in Splunk - Splunk Community

Splunk Enterprise Security

Hi,

Is there any tools to visualize data lineage in splunk ? https://en.wikipedia.org/wiki/Data_lineage

We would like to see what was orginal data, how many stops it had an the result data

duoms

I don’t think there is visualizations to see complete flow of an event from source to destination.

there could be many components involved from source to destination.

lets say:

universal forwarder(original data ) -> heavy forwarder -> indexer -> search head(result)

————————————
If this helps, give a like below.

Get Updates on the Splunk Community!

Data Outage Monitoring and Reporting

We’ve all been there, right? Living our best life, working on our Splunk environment, when out of nowhere a ...

Manage Datasets and Connections in Catalog on Splunk Cloud Platform

Set Up Data Where You Use It Catalog already helps teams find and understand data across Splunk indexes, ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...