Sankey visualization

Description

This is an example of how to build an sankey visualization using the vega visualization in Kibana. This vega example has three versions of the sankey visualization. Its an 2 Level, 4 Level and 7 Level example. A Sankey visualization is a great way to show the movement of users through your application. It can also be used for any other kind of data representation that is based on multiple levels and each level has an defined start and ending point.

A Sankey chart is a kind of stream chart with the width of the lines shown relatively to the stream amount. Every passage in the example information has source and objective nation code. The chart will have two modes: all-to-all (default), in addition to it will permit clients to choose either the source or the objective nation, and show just related traffic.

Remarks

This download is not able to run immediately. But its easy to adapt to your needs. You only need to change the index to search in and also the fields that contain the source and the destination information.

Make sure source and destination contain similar values to make it work.

Source

If you wanna learn more about that check this blog which is the source for that example:

https://www.elastic.co/de/blog/sankey-visualization-with-vega-in-kibana

Tested versions
ECS compliant

You must log in to submit a review.

Related downloads

Traffic light using Vega

This traffic light visualizations is build with vega. The thresholds can be defined via values within the document itself.

Sigma AWS Cloudtrail Detection rules

A collection of rules based on the Sigma rules for AWS based on the Filebeat AWS module and Elastic agent integration.

Logstash Meraki Pipeline

Logstash Pipeline to load Meraki logs via Syslog into Elasticsearch

osquery performance dashboard

Kibana Dashboard example to visualize osquery performance

Threat detection Kibana dashboard

Kibana dashboard example visualizing the results of the Elastic SIEM detection engine

These downloads could be also interesting for you

Threat detection Kibana dashboard

Kibana dashboard example visualizing the results of the Elastic SIEM detection engine

AWS Cloudtrail Monitoring dashboard

Deep insights into AWS Cloudtrail events for SIEM and Monitoring

Sigma Sysmon detection rules

A collection of rules based on the Sigma detection rules for Windows Sysmon events based on Winlogbeat data.

Filebeat Suricata Canvas dashboard

A Kibana Canvas dashboard example that visualizes suricata logs collected with Filebeat.

Vega Compound Gauge

This is a compund gauge visualization made with Vega. Its very helpful for visualization of percentage values.

Office 365 dashboards

A collection of Kibana dashboards to provide a holistic view of Microsoft Office 365 environments