topic Re: rangemap problem in version 5? in Dashboards & Visualizations

rangemap problem in version 5?

jangid — Mon, 19 Nov 2012 16:24:52 GMT

my search string is

sourcetype=health | head 1 | rangemap field=status default=severe elevated=2-2 low=1-1 | eval field=if(status==1 OR status==2, "Connected", "Not Connected")

and

sourcetype="log" pid_status earliest="-30s" latest=now | dedup host | head 3 | where pid_status="(Active)" |  stats count | rangemap field=count low=2-2 default=severe | eval count=case(count == 0, "Not Running", count == 1, "Not Running", count == 2, "Active", count == 3, "Not Running")

above search works fine in version 4.3.3, build 128297 and I can see colored rectangle.
but when I deploy this in latest version of Splunk - I can't see any colored rectangle in anywhere my app. I am using rangemap in four different view.

is this bug or something wrong in my app?
I have also installed sideview_util app.

Thanks

Re: rangemap problem in version 5?

lguinn2 — Mon, 19 Nov 2012 16:41:21 GMT

In Splunk 5.0, the visualization for a Single Panel has changed. Now the color will show up as text of a different color, rather than a background of a different color. Is this what you are seeing?

Re: rangemap problem in version 5?

rhayle — Tue, 20 Nov 2012 10:02:12 GMT

So how can you bring back the color boxes again?

Re: rangemap problem in version 5?

jangid — Wed, 21 Nov 2012 11:16:40 GMT

This change break my app. How to fix this or implement similar look & feel or any other alternate?

Re: rangemap problem in version 5?

Drainy — Fri, 23 Nov 2012 09:31:56 GMT

Right, I think I've grabbed all the relevant bits. In an application.css in SPLUNK_HOME/etc/apps/APPNAMEOFYOURCHOICE/appserver/static put the following;

.SingleValueHolder {
    background-color: #CCCCCC;
    background-image: url("/en-US/static/@128297/img/skins/default/overlay_gradient_50.png");
    background-repeat: repeat-x;
    border-radius: 4px 4px 4px 4px;
    box-shadow: 0 0 5px rgba(0, 0, 0, 0.25) inset;
    font-size: 14px;
    font-weight: bold;
}
.SingleValue .severe {
    background-color: #BB2121;
    color: #FFFFFF;
}
.SingleValue .high {
    background-color: #E67918;
    color: #FFFFFF;
}
.SingleValue .elevated {
    background-color: #E9DA34;
    color: #000000;
}
.SingleValue .guarded {
    background-color: #4DA6DF;
    color: #FFFFFF;
}
.SingleValue .low {
    background-color: #72C72D;
    color: #FFFFFF;
}
.SingleValue .None {
    background-color: #999999;
    color: #FFFFFF;
}
.SingleValue .singleResult {
    color: #FFFFFF !important;
    font-size: 14px;
    margin: 0px;
    padding-left: 3px;
    vertical-align:0px;
}

EDIT: Added CSS for singleResult, needed to override the new singleResult related CSS in v5