<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Using Status Indicator visualization to change color based on count in All Apps and Add-ons</title>
    <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-Status-Indicator-visualization-to-change-color-based-on/m-p/478314#M58718</link>
    <description>&lt;PRE&gt;&lt;CODE&gt;&amp;lt;form&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search id="bStats"&amp;gt;
          &amp;lt;done&amp;gt;
            &amp;lt;condition&amp;gt;
              &amp;lt;set token="value3"&amp;gt;$result.server$&amp;lt;/set&amp;gt;
              &amp;lt;set token="color3"&amp;gt;$result.color$&amp;lt;/set&amp;gt;
              &amp;lt;set token="icon3"&amp;gt;$result.icon$&amp;lt;/set&amp;gt;
            &amp;lt;/condition&amp;gt;
          &amp;lt;/done&amp;gt;
          &amp;lt;query&amp;gt;| makeresults
| eval server="SERVER-1" 
| stats count by server
| eval color=if(count&amp;lt;=0, "#dc4e41", "#65a637"), icon=if(count&amp;lt;=0, "times-circle", "check-circle")
| table server icon color&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;20&amp;lt;/option&amp;gt;
        &amp;lt;option name="dataOverlayMode"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="percentagesRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="totalsRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="wrap"&amp;gt;true&amp;lt;/option&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;viz type="status_indicator_app.status_indicator"&amp;gt;
        &amp;lt;search base="bStats"&amp;gt;
          &amp;lt;query/&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="height"&amp;gt;115&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.colorBy"&amp;gt;field_value&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.fillTarget"&amp;gt;background&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.fixIcon"&amp;gt;warning&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.icon"&amp;gt;field_value&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.precision"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.showOption"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.staticColor"&amp;gt;#555&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.useColors"&amp;gt;true&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.useThousandSeparator"&amp;gt;false&amp;lt;/option&amp;gt;
      &amp;lt;/viz&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Hi, @brandonbachman&lt;BR /&gt;
&lt;A href="https://answers.splunk.com/answers/791565/simple-xml-i-want-to-create-cool-single-value-disp.html"&gt;Simple xml : I want to create cool single value display html&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;Please refer to the answer I asked earlier.&lt;/P&gt;</description>
    <pubDate>Wed, 01 Jan 2020 03:41:35 GMT</pubDate>
    <dc:creator>to4kawa</dc:creator>
    <dc:date>2020-01-01T03:41:35Z</dc:date>
    <item>
      <title>Using Status Indicator visualization to change color based on count</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-Status-Indicator-visualization-to-change-color-based-on/m-p/478313#M58717</link>
      <description>&lt;P&gt;I am trying to use the Status Indicator visualization but I am unsure about the syntax. I have a search query that looks like this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;server="SERVER-1"
  | eval server="SERVER-1"
  | stats count
  | eval color=if(count&amp;lt;=0, "#dc4e41", "#65a637"), icon=if(count&amp;lt;=0, "times-circle", "check-circle")
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;The panel should show the server name (SERVER-1) while the background color and icon changes according to count (if count&amp;lt;=0 the background should be red, otherwise the background should be green). Same idea for icons "times-circle" and "check-circle".&lt;/P&gt;

&lt;P&gt;The first picture is what I have. The second picture is similar to what I want it to look like (it should also show an icon). Is there something wrong with my syntax? I don't want the count to be displayed, just the server name. I need the background color and icon to change based on count.&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;WHAT I HAVE:&lt;/STRONG&gt;&lt;BR /&gt;
&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/8166i90A415E12DE6A7C6/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;WHAT I WANT IT TO LOOK LIKE:&lt;/STRONG&gt;&lt;BR /&gt;
&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/8167i254244E21C5391A0/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 01 Jan 2020 01:27:44 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-Status-Indicator-visualization-to-change-color-based-on/m-p/478313#M58717</guid>
      <dc:creator>brandonbachman</dc:creator>
      <dc:date>2020-01-01T01:27:44Z</dc:date>
    </item>
    <item>
      <title>Re: Using Status Indicator visualization to change color based on count</title>
      <link>https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-Status-Indicator-visualization-to-change-color-based-on/m-p/478314#M58718</link>
      <description>&lt;PRE&gt;&lt;CODE&gt;&amp;lt;form&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search id="bStats"&amp;gt;
          &amp;lt;done&amp;gt;
            &amp;lt;condition&amp;gt;
              &amp;lt;set token="value3"&amp;gt;$result.server$&amp;lt;/set&amp;gt;
              &amp;lt;set token="color3"&amp;gt;$result.color$&amp;lt;/set&amp;gt;
              &amp;lt;set token="icon3"&amp;gt;$result.icon$&amp;lt;/set&amp;gt;
            &amp;lt;/condition&amp;gt;
          &amp;lt;/done&amp;gt;
          &amp;lt;query&amp;gt;| makeresults
| eval server="SERVER-1" 
| stats count by server
| eval color=if(count&amp;lt;=0, "#dc4e41", "#65a637"), icon=if(count&amp;lt;=0, "times-circle", "check-circle")
| table server icon color&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;20&amp;lt;/option&amp;gt;
        &amp;lt;option name="dataOverlayMode"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="percentagesRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="totalsRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="wrap"&amp;gt;true&amp;lt;/option&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;viz type="status_indicator_app.status_indicator"&amp;gt;
        &amp;lt;search base="bStats"&amp;gt;
          &amp;lt;query/&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="height"&amp;gt;115&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.colorBy"&amp;gt;field_value&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.fillTarget"&amp;gt;background&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.fixIcon"&amp;gt;warning&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.icon"&amp;gt;field_value&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.precision"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.showOption"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.staticColor"&amp;gt;#555&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.useColors"&amp;gt;true&amp;lt;/option&amp;gt;
        &amp;lt;option name="status_indicator_app.status_indicator.useThousandSeparator"&amp;gt;false&amp;lt;/option&amp;gt;
      &amp;lt;/viz&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Hi, @brandonbachman&lt;BR /&gt;
&lt;A href="https://answers.splunk.com/answers/791565/simple-xml-i-want-to-create-cool-single-value-disp.html"&gt;Simple xml : I want to create cool single value display html&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;Please refer to the answer I asked earlier.&lt;/P&gt;</description>
      <pubDate>Wed, 01 Jan 2020 03:41:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/All-Apps-and-Add-ons/Using-Status-Indicator-visualization-to-change-color-based-on/m-p/478314#M58718</guid>
      <dc:creator>to4kawa</dc:creator>
      <dc:date>2020-01-01T03:41:35Z</dc:date>
    </item>
  </channel>
</rss>

