Splunk Inc.
Sankey graph visualization for machine data search and analysis system

Abstract:

Disclosed are a system and a method for providing user-interactive flow diagrams such as Sankey diagrams. In an embodiment, a machine data search and analysis system retrieves search results including a plurality of events in response to a search query, each of the events containing time-stamped data. The system identifies a plurality of nodes based on the time-stamped data of the events. Each of the events is indicative of a relationship between a starting node and an ending node. The system further causes display of an interactive flow diagram that includes the nodes and a plurality of flows. Each of the flows represents events that share a common relationship between a starting node and an ending node and visually connecting the starting node and the ending node.