Configurable dendrogram visualization built using D3. Supports dark-mode, and can layout horizontally, vertically or as a radial dendogram. These charts are useful to display hierarchical data.
Copyright (C) 2020 Chris Younger. I am a Splunk Professional Services consultant working for JDS Australia, in Brisbane Australia.
Source code | Questions, Bugs or Suggestions | My Splunk apps
This app is not "visible" in the Splunk UI app menu. After installing the app, follow this process:
1. Do a search of any data and switch to the visualisation tab
2. In the top left, in the visualisastion menu, select "Dendrogram viz"
3. Open the "Format" menu then select "Help"
4. There will be a link to the in-app documentation, which includes working examples
This visualisation expects a table of data with specific field names. There are two main data formats, one with a column called "path" or a second format with fields "child" and "parent". Additional optional columns are listed below.
$dendrogram_viz_drilldown$
. See token section below.
Here is an example search that you can use with web data
index=web | stats count by uri_path | rename uri_path as path
Here is an example of how the "path" data format should look
Here is an example of how the "child/parent" data format should look
When clicking a node, the following tokens will be set: $dendrogram_viz_path$
, $dendrogram_viz_name$
, $dendrogram_viz_name$
(see 'names' above) and $dendrogram_viz_drilldown$
(if drilldown column is provided in the data). Hit F12 to open the browser console, to see what tokens are being set.
The following third-party libraries are used by this app. Thank you!
no changes, just a version bump to keep splunkbase from archiving the app
v1.1.6 * Fix drilldowns
v1.1.5 * Now supports a second type of data format. Instead of using a column "path" you can instead specify rows with "child" and "parent" columns. Well suited to data like exists for a process tree.
v1.0.5 * Update internal jquery library for Splunk Cloud compatibility
v1.0.3 * Added formatter options for setting colors * Merged PR from bowsemana that allows settings node names (Thanks!) * Fix bug when path token would sometimes be incorrect * Documentation updates.
v1.1.5
* Now supports a second type of data format. Instead of using a column "path" you can instead specify rows with "child" and "parent" columns. Well suited to data like exists for a process tree.
v1.0.5
* Update internal jquery library for Splunk Cloud compatibility
v1.0.3
Added formatter options for setting colors
Merged PR from bowsemana that allows settings node names (Thanks!)
Fix bug when path token would sometimes be incorrect
Documentation updates.
v1.0.5
* Update internal jquery library for Splunk Cloud compatibility
v1.0.3
Added formatter options for setting colors
Merged PR from bowsemana that allows settings node names (Thanks!)
Fix bug when path token would sometimes be incorrect
Documentation updates.
v1.0.3
Added formatter options for setting colors
Merged PR from bowsemana that allows settings node names (Thanks!)
Fix bug when path token would sometimes be incorrect
Documentation updates.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.