Separate filtered queries for source and destination fields in vega sankey visualization

Elastic Stack Kibana
1

I want to create a sankey chart using a single field. Both my source and destination data are stored in that field. Is it possible to use separate filters for source and destination data?

2

Hey Şenol,

There are three ways of approaching this. The first one is add two runtime fields to the query, one for the source and one for the destination (use Painless and .splitOnToken). Or you could do this using vega to transform the data. The best way is to add these fields separately in the index mapping and split the source+destination field at ingest time.

I hope this helps,

Tim

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.