Sankey visualization

Description

This is an example of how to build an sankey visualization using the vega visualization in Kibana. This vega example has three versions of the sankey visualization. Its an 2 Level, 4 Level and 7 Level example. A Sankey visualization is a great way to show the movement of users through your application. It can also be used for any other kind of data representation that is based on multiple levels and each level has an defined start and ending point.

A Sankey chart is a kind of stream chart with the width of the lines shown relatively to the stream amount. Every passage in the example information has source and objective nation code. The chart will have two modes: all-to-all (default), in addition to it will permit clients to choose either the source or the objective nation, and show just related traffic.

Remarks

This download is not able to run immediately. But its easy to adapt to your needs. You only need to change the index to search in and also the fields that contain the source and the destination information.

Make sure source and destination contain similar values to make it work.

Source

If you wanna learn more about that check this blog which is the source for that example:

https://www.elastic.co/de/blog/sankey-visualization-with-vega-in-kibana

Tested versions
ECS compliant

You must log in to submit a review.

Related downloads

Logstash Meraki Pipeline

Logstash Pipeline to load Meraki logs via Syslog into Elasticsearch

OpenSIEM Logstash Parsing

Logstash Parsing Configurations for Elastic SIEM parses many different sources into ECS

Data flow canvas

Average rating:

This canvas examples shows some possibilities of how to visualize data flows. Every flow can be activated / deactivated based on your Elasticsearch data.

Sigma Windows inbuilt detection rules

A collection of rules based on the Sigma rules for Windows (inbuilt folder) based on Winlogbeat data .

Squid Proxy Access Logs Dashboard

Analyze Squid Proxy access logs ingested via Filebeat.

Kibana Maps with Open Weather Map

This is the default basemap of Kibana incl. the Open Weather Map tile for temperature, wind and pressure

These downloads could be also interesting for you

CMDB dependency in Kibana Dashboard

Kibana vega example to show how to load visualize relationships between different infrastructure and network components in vega.

Filebeat Suricata Canvas dashboard

A Kibana Canvas dashboard example that visualizes suricata logs collected with Filebeat.

Lens Conversion Rate

Lens conversion rate for RUM data using Lens Formulas

Vega advanced heat map

Vega example to show GitHub commits per author per hour of day.

Kibana Enhanced Table plugin

Data Table visualization with enhanced features like computed columns, pivot table or filter bar

Ingest Pipeline Monitoring

This Kibana dashboard can be used monitor your ingest pipelines