Acrobat logo Download manual as PDF

Acrobat logo Download topic as PDF

Treemap components

Learn how to interpret treemap components.

Visual elements

Rectangle hierarchy

Treemap rectangles represent parent and child categories. This treemap has multiple parent and child rectangles.

Custom Viz treemap.png

Each rectangle in a treemap represents a parent category. For example, here is the bin parent category from the treemap.

Custom viz treemap parent.png

Every parent rectangle is made up of child rectangles. In this example, the bin parent category includes jars, splunkd, and node child categories.

Custom viz treemap child.png

Rectangle size

Rectangle size shows the relative importance of a particular parent or child category. You can use rectangle size to see how an aggregated metric, such as a yearly budget, breaks down into parent and child categories.


Treemaps can use one of the following color modes.


Each rectangle appears in a different color based on parent_category values.


Rectangles appear in different shades on a spectrum between a minimum and maximum color. color_field values in the data determine the particular shade for a rectangle.

No color mode

If no color mode is used, the diagram shows all rectangles in a single color.

Interactive elements

Click a rectangle in a treemap to get more information.


Hover on a rectangle to see a tooltip with details about the category.


Click on a child rectangle to open a search using the child category values.


Click on a parent rectangle to zoom in on the parent category and its child categories.

Last modified on 12 August, 2016
Create a treemap query
Customize a treemap

This documentation applies to the following versions of Treemap: 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0, 1.3.0, 1.4.0, 1.5.0

Was this documentation topic helpful?

You must be logged into in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters