All Apps and Add-ons

Flow Map Link Labels - Bi-directional traffic

rijutha
Explorer

Hi,

In the flow map viz, when there is bi-directional traffic between two nodes, the link labels are displayed one on top of another which makes it difficult to read the count for good/warn/error. Below is a screenshot. Is there a way around this? Probably when there is bidirectional traffic to have one label above the link and the other below?

alt text

0 Karma
1 Solution

chrisyounger
SplunkTrust
SplunkTrust

Hi @rijutha,

You can offset the labels by supplying the labelx and labely fields in your data. This will allow you to offset the label by a number of pixels from the center point.

If you have a bi-directional link its also a good idea to change the attachment points using fromside and toside again, in your data.

From the doco:
labelx Offset the label left and right from the centre of the line. Measured in pixels. Negative values move left.
labely Offset the label up and down from the centre of the line. Measured in pixels. Negative values move up.
fromside Specify a custom attachment point on the source node. See note [1] below.
toside Specify a custom attachment point on the target node. See note [1] below.

[1] fromside / toside: Possible values are top, bottom, right, left. Defaults to the centre of the node. The value can also be specified with a modifier (+/-) to tune where on that side the attachment occurs. For example: "bottom-10" will attach to the bottom side, 10px to the left of center, "top+20" will attach to the top and 20 pixels to the right of center. When using path with multiple nodes, the fromside only affects the first node and the toside only affects the last node.

View solution in original post

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

Hi @rijutha,

You can offset the labels by supplying the labelx and labely fields in your data. This will allow you to offset the label by a number of pixels from the center point.

If you have a bi-directional link its also a good idea to change the attachment points using fromside and toside again, in your data.

From the doco:
labelx Offset the label left and right from the centre of the line. Measured in pixels. Negative values move left.
labely Offset the label up and down from the centre of the line. Measured in pixels. Negative values move up.
fromside Specify a custom attachment point on the source node. See note [1] below.
toside Specify a custom attachment point on the target node. See note [1] below.

[1] fromside / toside: Possible values are top, bottom, right, left. Defaults to the centre of the node. The value can also be specified with a modifier (+/-) to tune where on that side the attachment occurs. For example: "bottom-10" will attach to the bottom side, 10px to the left of center, "top+20" will attach to the top and 20 pixels to the right of center. When using path with multiple nodes, the fromside only affects the first node and the toside only affects the last node.

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...