topic Re: Status Indicator - Custom Visualization: Why is "Icon Only" view not working as expected? in All Apps and Add-ons

Status Indicator - Custom Visualization: Why is "Icon Only" view not working as expected?

david_rose — Fri, 03 Feb 2017 16:09:05 GMT

I have the following search I am using to create some status indicator visualizations:

... | rangemap field=delta #ff0000=-1000-0 #008000=0-10000 default=#ff0000 | rename range as range_color | eval icon="check-circle" | table delta icon range_color

This works as expected if I use "Show Value and Icon":

If I use "Show Icon Only", i get the following error:

Error rendering Status Indicator visualization: The specified icon does not exist. Check the font awesome website to find a valid icon. Examples: arrow-circle-left, bullseye, mobile

Re: Status Indicator - Custom Visualization: Why is "Icon Only" view not working as expected?

harry521 — Tue, 14 Feb 2017 19:25:47 GMT

I encounter the exact same problem. But if picked icon "Static icon", it worked. Not working when choosing "Field value". Anyone has any thoughts?

Re: Status Indicator - Custom Visualization: Why is "Icon Only" view not working as expected?

nickhills — Tue, 14 Feb 2017 20:20:35 GMT

try:

basesearch | table  icon range_color delta

I found this too - the order of the fields is relevent when not using both the value and the icon, yet it still insists on providing all 3 fields.

Re: Status Indicator - Custom Visualization: Why is "Icon Only" view not working as expected?

harry521 — Wed, 15 Feb 2017 14:32:06 GMT

Thanks nickhillscpl. "Order" does matter! In my case, I have to put the ragemap field to the middle. Never thought of that!

Re: Status Indicator - Custom Visualization: Why is "Icon Only" view not working as expected?

woodcock — Wed, 22 Feb 2017 04:11:02 GMT

So did this fix it for you? If so, please do click Accept to close the question and help others.

Re: Status Indicator - Custom Visualization: Why is "Icon Only" view not working as expected?

aaraneta_splunk — Mon, 20 Mar 2017 01:44:12 GMT

@david.rose - Did the answer provided by nickhillscpl help provide a working solution to your question? If yes, please don't forget to resolve this post by clicking "Accept". If no, please leave a comment with more feedback. Thanks!