https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328705#M39347 <P>Hi, In fact by adding in an extra column this is now working.</P> <P>eventtype=mlc sourcetype=tps host=TimeSeries <EM>| eval foo="ON" | eval foo1="true" | eval foo2="ON" | eval duration = endTime - startTime | search name = "</EM>" operationIdentity=* | eval fullyQualifiedMethod = name."#".operationIdentity |sort - duration | eval fullyQualifiedMethod2 = name."#".operationIdentity | table _time fullyQualifiedMethod fullyQualifiedMethod2 duration</P> Mon, 06 Mar 2017 12:20:33 GMT robertlynch2020 2017-03-06T12:20:33Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328702#M39344 <P>Below is an image of my dashboard, I have multiple graphs been drawn and they all use the same colors automatically.<BR /> However when i add in a timeline i can only get blue, when i turn on the colors i get the second graphs, not very nice.</P> <P>Is there any way to get timeline to take the colors that have been picked allready?</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/2557i4416FADCC435AE93/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/2558i0482C77A21F6014E/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Wed, 01 Mar 2017 15:03:25 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328702#M39344 robertlynch2020 2017-03-01T15:03:25Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328703#M39345 <P>Splunk Charts applies series colors to all charts. In fact if the series names are same, that is how all series will pick same color.</P> <P>If you notice in your screenshot, when you choose <STRONG>Categorical</STRONG> colors for the Timeline visualization, the Legends in the same sequence have the same colors as compared to other charts i.e. First color in your timechart as well TimeLine visualization is blue(0x1e93c6) and second is orange(0xf2b827)... and so on.</P> <P>Following are default series colors picked up by Splunk charts (<STRONG>charting.seriesColors</STRONG><span class="lia-unicode-emoji" title=":disappointed_face:">😞</span><BR /> [0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440, 0x3863a0, 0xa2cc3e, 0xcc5068, 0x73427f, 0x11a88b, 0xea9600, 0x0e776d, 0xffb380, 0xaa3977, 0x91af27, 0x4453aa, 0x99712b, 0x553577, 0x97bc71, 0xd35c2d, 0x314d5b, 0x99962b, 0x844539, 0x00b290, 0xe2c188, 0xa34a41, 0x44416d, 0xe29847, 0x8c8910, 0x0b416d, 0x774772, 0x3d9988, 0xbdbd5e, 0x5f7396, 0x844539]</P> Sat, 04 Mar 2017 19:32:48 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328703#M39345 niketn 2017-03-04T19:32:48Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328704#M39346 <P>Hi. Thanks for looking at this for me. I agree the colors are the same sequence in Categorical graph. </P> <P>But this issue is they are changing over and over even do the series name is the same ( Lots of round circles). what i really would love is to have long blocks from the first image with the same colors.</P> <P>So a user can look at the colors of a series in the pie and its the same in thr gantt.</P> Sat, 04 Mar 2017 23:58:48 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328704#M39346 robertlynch2020 2017-03-04T23:58:48Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328705#M39347 <P>Hi, In fact by adding in an extra column this is now working.</P> <P>eventtype=mlc sourcetype=tps host=TimeSeries <EM>| eval foo="ON" | eval foo1="true" | eval foo2="ON" | eval duration = endTime - startTime | search name = "</EM>" operationIdentity=* | eval fullyQualifiedMethod = name."#".operationIdentity |sort - duration | eval fullyQualifiedMethod2 = name."#".operationIdentity | table _time fullyQualifiedMethod fullyQualifiedMethod2 duration</P> Mon, 06 Mar 2017 12:20:33 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328705#M39347 robertlynch2020 2017-03-06T12:20:33Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328706#M39348 <P>@robertlynch2020 ... You can convert your previous comment as an answer and vote the same. However, this goes back to my point that same label name across the dashboard will pick same color because default series colors are predefined.</P> Mon, 06 Mar 2017 12:33:49 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328706#M39348 niketn 2017-03-06T12:33:49Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328707#M39349 <P>Will do. Thanks for your help <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Mon, 06 Mar 2017 12:51:29 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328707#M39349 robertlynch2020 2017-03-06T12:51:29Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328708#M39350 <P>Got this working with help from @niketnilay answer</P> <P>eventtype=mlc sourcetype=tps host=TimeSeries | eval foo="ON" | eval foo1="true" | eval foo2="ON" | eval duration = endTime - startTime | search name = "" operationIdentity=* | eval fullyQualifiedMethod = name."#".operationIdentity |sort - duration | eval fullyQualifiedMethod2 = name."#".operationIdentity | table _time fullyQualifiedMethod fullyQualifiedMethod2 duration</P> Mon, 06 Mar 2017 13:03:59 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-timeline-visulations-can-i-get-the-colors-to-be-the-same/m-p/328708#M39350 robertlynch2020 2017-03-06T13:03:59Z