Link Analysis - Installation and Configuration

Installation

Upload admlinkanalysis2 as a regular Splunk app, restart Splunk

Configuration

Create accelerated Data Model

Let’s use webtraffic dataset for our configuration example:

index=webtraffic | head 10

We have to create accelerated data model for that dataset:

Create Panel

Go to the search app and execute the following search:

We are to create a Link Analysis panel based on  makeresults search. Select ADM Link Analysis 2.0 viz then save it as a dashboard panel.




Note that your panel is going to be empty until you configure it. Click on edit and fill out the form, specify your Data Model, Dataset, Fields and Aggregates: