A companion function Sankey Widget that produces data compatible with the widget.

ParameterTypeRequiredDefaultDescription
sourcestringtrue The field containing the source node ID.
targetstringtrue The field containing the target node ID.
weightAggregatefalsecount(as=_count)A function used to calculate the weight the edges. Good candidates are functions like e.g. sum, count or max.

Examples

For a webserver log, show which URLs match HTTP methods

humio
#type=accesslog | sankey(source=method, target=url)

For a webserver log, show referrers by URL

humio
#type=accesslog referrer!="-"| sankey(source=referrer, target=url)