Splunk Search

Sankey diagram for order paths based on message field per orderId?

smahoney
Path Finder

This seems like it should be simple, but all I ever get is a 2 column sankey visualization with the starting event then the end event ribbons where the ribbons represent the count of events.

Is there any way to create a visualization where each orderId starts with a message like "order received", then that order can process through 5-10 other messages, but not all orders will do this.

I want to visualize how many say stop at message 3, while also seeing the paths from message three through the process for those that don't end there.

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Changes to Splunk Instructor-Led Training Completion Criteria

We’re excited to share an update to our instructor-led training program that enhances the learning experience ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

❄️ Welcome the new year with our January lineup of Community Office Hours, Tech Talks, and Webinars! 🎉 ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...