Sankey visualization

Description

This is an example of how to build an sankey visualization using the vega visualization in Kibana. This vega example has three versions of the sankey visualization. Its an 2 Level, 4 Level and 7 Level example. A Sankey visualization is a great way to show the movement of users through your application. It can also be used for any other kind of data representation that is based on multiple levels and each level has an defined start and ending point.

A Sankey chart is a kind of stream chart with the width of the lines shown relatively to the stream amount. Every passage in the example information has source and objective nation code. The chart will have two modes: all-to-all (default), in addition to it will permit clients to choose either the source or the objective nation, and show just related traffic.

Remarks

This download is not able to run immediately. But its easy to adapt to your needs. You only need to change the index to search in and also the fields that contain the source and the destination information.

Make sure source and destination contain similar values to make it work.

Source

If you wanna learn more about that check this blog which is the source for that example:

https://www.elastic.co/de/blog/sankey-visualization-with-vega-in-kibana

Tested versions
ECS compliant

You must log in to submit a review.

Related downloads

Coffee Canvas Example

Kibana Canvas example infographic to show coffee consumption on a wallboard

Sigma Windows Process Creation detection rules

A collection of rules based on the Sigma rules for Windows (process creation folder) based on Winlogbeat data .

Move to next ILM phase Watcher

This watcher job is moving specific indices based on e.g. disc usage into the next ILM phase.

Filebeat Suricata Canvas dashboard

A Kibana Canvas dashboard example that visualizes suricata logs collected with Filebeat.

Plex ingest node pipeline

A plex ingest node pipeline to parse logs from Plex for Elasticsearch

Google Cloud monitoring dashboard

Dashboard to monitor GCP resources using different metrics and logs.

These downloads could be also interesting for you

Threat detection Kibana dashboard

Kibana dashboard example visualizing the results of the Elastic SIEM detection engine

PI Hole Logstash Pipeline and Dashboard

A filter for Logstash parsing PI-Hole logs + Dashboard to visualize the data

Filebeat Log analysis canvas example

This is a simple canvas dashboard example that analyzes logs created by Filebeat.

Filebeat Suricata Canvas dashboard

A Kibana Canvas dashboard example that visualizes suricata logs collected with Filebeat.

Watcher History Dashboard

This dashboard shows the history of executed watcher jobs.

osquery performance dashboard

Kibana Dashboard example to visualize osquery performance