Hello Splunkers,
I would like to show the user flow on Sankey visualization.For ,that i have index, source type ,interaction_id ,activity_id, screen_id flow_name ,component fields. In the component field, *I have 2 values, one is APIGATEWAY and another one is ES. APIGATEWAY has some flow names and ES also has some flow names., there is a relation between those two flow name values.**I need to get the relation between those flow names of APIGATEWAY to ES as two separate nodes or fields on Sankey visualization .** (Note: flow name (or) API name in APIGATEWAY that calls the another one or more flow name/API name
I have this query:
*index=abc sourcetype=123 screen_id =xyz interaction_id=def |stats count by activity_id screen_id component flow_name|search flow_name!=""*
Note: activity_id is different for all flow_names
![alt text][1]
Please suggest how to show the relation between APIGATEWAY and ES flow names on Sankey visualization
[1]: /storage/temp/254678-image.png
↧