All Products
Search
Document Center

Simple Log Service:Display query results in a sankey diagram

Last Updated:Aug 02, 2023

This topic describes how to configure a sankey diagram to display query results.

Background information

The sankey diagram is a specific type of flow chart. It shows the flow from one set of values to another set of values. Sankey diagrams are applicable to scenarios such as network traffic flows. A sankey diagram contains values of three fields: source, target, and value. The source and target fields describe the source and target nodes, and the value field describes the flows from the source node to the target node.

Each sankey diagram consists of the following elements:

  • Node

  • Edge

The sankey diagram has the following features:

  • The start flow is equal to the end flow. The overall width of all main edges is equal to the total sum of all branch edges. This allows you to manage and maintain a balanced flow of all traffic.

  • The edge width in a row represents the traffic distribution in a specific status. The edge width in a row represents the distribution of traffic.

  • The width of an edge between two nodes represents the flow volume in a status.

The following table lists the data that can be displayed in a sankey diagram.

source

target

value

node1

node2

14

node1

node3

12

node3

node4

5

..

The following figure shows the data relationships in a sankey diagram.Data relationships in a sankey diagram

Procedure

  1. Log on to the Log Service console.
  2. In the Projects section, click the name of the project that you want to manage.
  3. Choose Log Storage > Logstores and click the Logstore that you want to manage.
  4. Enter a query statement in the search box, select a time range, and then click Search & Analyze.
  5. Click Sankey diagram - 001 to display the query results in a sankey diagram.

  6. On the Properties tab, configure the properties of the sankey diagram.

    Parameter

    Description

    Start Column

    The start node.

    End Column

    The end node.

    Value Column

    The value of traffic between the start node and end node.

    Margin

    The distance of the axis to the borders of the chart. This includes the Top Margin, Bottom Margin, Right Margin, and Left Margin.

Example of a simple sankey diagram

If a log entry contains the source, target, and value fields, you can execute a Subqueries statement to obtain the total sum of all steamValue values.

* | select sourceValue, targetValue, sum(streamValue) as streamValue from (select sourceValue, targetValue,
 streamValue, __time__ from log group by  sourceValue, targetValue, streamValue, __time__ order by __time__ desc) group by sourceValue,
 targetValue
Simple sankey diagram

Example of a sankey diagram for layer-7 access logs of Server Load Balance (SLB)

Simple Log Service allows you to display query results of Usage notes in a sankey diagram.

* | select COALESCE(client_ip, slbid, host) as source, COALESCE(host, slbid, client_ip) as dest, sum(request_length) as inflow group by grouping sets( (client_ip, slbid), (slbid, host))Nested subquery