icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.
Log4Shell Vulnerability: Information and guidance for you. Get resources.

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading 3D Graph Network Topology Visualization
SHA256 checksum (3d-graph-network-topology-visualization_132.tgz) 7964c3fca54b9d105599672a2a00c82693aad0f8a5fd59c046eaf77b7fc32949 SHA256 checksum (3d-graph-network-topology-visualization_131.tgz) 1f84e08c3b5131580b4fb3b0342ada39960eaf86be3607c4431b2859521339a8 SHA256 checksum (3d-graph-network-topology-visualization_130.tgz) aece3ff896728155fa899fba7681e081f1c7465fdfd3a84fa00589660233b73b SHA256 checksum (3d-graph-network-topology-visualization_120.tgz) 28c3d2a46f8d4c5c6492fbc62fa193448cc9a81957b53bef14d594cbb81d0fdf SHA256 checksum (3d-graph-network-topology-visualization_110.tgz) 185844bede8199ddd44a61c7065046d2c22b14ad392dd7333dcc5edc5838bc9d
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate


3D Graph Network Topology Visualization

Splunk Cloud
Splunk Labs
This app is NOT supported by Splunk. Please read about what that means for you here.
Graph Algorithms for Machine Learning Toolkit and custom visualisation for Splunk to plot relationships between objects with force directed graph based on ThreeJS/WebGL.

Find more information on the details page with link to blog articles like:


You can find many more information around use cases on the following Splunk blogs:
- Chasing a Hidden Gem: Graph Analytics with Splunk’s Machine Learning Toolkit
- Understanding and baselining network behaviour - part 1
- Understanding and baselining network behaviour - part 2


| stats count by src dest [color_src] [color_dest] [edge_color] [weight_src] [weight_dest] [edge_weigth]

Replace src and dest with your fields to start. All other fields are optional and default values will be used if not given.

Optional values

Used to customise nodes and edges (or links) styling.

Field Name Type Description Example
color_src string Color of source node in HEX #00DD00
color_dest string Color of destination node in HEX #CC00FF
edge_color string Color of edge in HEX #12FF00
weight_src numeric Sphere size of source node 2.5
weight_dest numeric Sphere size of destination node 3
edge_weight numeric Stroke weight of edge line in pixels 2.1


  • Field names must correspond to the ones specified above to be properly handled by the visualization
  • Any edge_weight value higher than 18 will be normalised to 18


Lookup tables

  • Add a lookup table defining these additional values to your Splunk instance. An example below.
$~ cat {your_lookup_table}.csv
  • Execute your SPL
    {search} | stats count by src dest | lookup {your_lookup_table} source AS src | lookup {your_lookup_table} source AS dest OUTPUTNEW color AS color_dest, weight AS weight_dest

Simple SPL

  • Execute your SPL
    {search} | stats count as edge_weight by src dest | eval color_src="#cc0000", color_dest="#00ff00", weight_src=3 | eval edge_color=if(edge_weight < 18, "#0000cc","")

Graph Algorithm Examples

Four dashboards are provided to show graph algorithms in action using NetworkX. Select them by clicking on Graph Example Dashboards dropdown in the app navigation bar.


Make sure you have the following Splunk apps installed in your instance to correctly visualize integrated dashboards.

Give global permissions to MLTK app if not already done


This app is open sourced on github, so if you consider contributing to it, please refer to the contribution guidelines. Thanks in advance!


Big thanks to Erica for making this custom visualisation real!
And a big thanks to Oliver for his awesome color gradient macros which are bundled in the app, too!
Finally many thanks to Greg for adding his work on the graph analytics workflow

Release Notes

Version 1.3.2
May 11, 2022
  • Minor fixes to maintain Cloud Compatibility
  • Patched security vulnerabilities
Version 1.3.1
June 21, 2021
  • Fixed security vulnerability on dependency
  • Minor fix for "Graph Analysis Framework" dashboard affecting Splunk 8.2 users
Version 1.3.0
May 19, 2021
  • Major libs upgrade and performances enhancements
  • Fixed libs vulnerabilities
  • Dashboards re-styling
  • New feature: users can hide/show directional arrows on node links
Version 1.2.0
May 7, 2020

Added graph analysis workflow and dashboards
Bug fixes and improvements

Version 1.1.0
March 19, 2020

Added dashboard examples and NetworkX based graph algorithms for degree centrality, eigenvector centrality, betweenness centrality, clustering coefficients, connected components and label propagation. Splunk's Machine Learning Toolkit and the Python for Scientific Computing Package Version 2.0 required.

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.