Sankey Visualization by Dataflect

Sankey Visualization by Dataflect is a lightweight Splunk custom visualization that turns any three-column search (source, target, value) into an interactive flow diagram. It scales to large result sets via paged aggregation, offers intuitive formatting options for link coloring (by link, by source, by target, gradient, or gray) and node alignment (justify, left, center, right), and automatically adapts to dark theme with solid backgrounds and readable labels. Use it in Search or dashboards to quickly surface fan-in/fan-out patterns, bottlenecks, and flow transitions across pipelines, networks, processes, or logs. This app was developed to support Splunk users that are migrating off of the EOL Splunk Sankey Diagram - Custom Visualization App. Long live Simple XML.