https://community.splunk.com/t5/Dashboards-Visualizations/SingleValue-for-Ration-Best-Option-for-Coloring/m-p/300375#M19078 <P>I'm working on a dashboard for metrics and one of the metrics is a ratio; I would like to color the ration red, yellow, or green based on percentage values.</P> <P>The "easy" solution is just to display a percentage and we can easily use the interface to set threshold values for the colors. I would really like to display a ration, however.</P> <P>If I use a ratio, I can calculate the percent, use rangemap to set the follow, and then classField to se the color. The problem with this approach is classField is set as deprecated. I would assume if it has been deprecated, they have thought through the use cases and have a way to display one field (the ratio) but use another (the percentage) for coloring, but I haven't figured it out yet.</P> Mon, 10 Jul 2017 19:42:42 GMT triest 2017-07-10T19:42:42Z https://community.splunk.com/t5/Dashboards-Visualizations/SingleValue-for-Ration-Best-Option-for-Coloring/m-p/300375#M19078 <P>I'm working on a dashboard for metrics and one of the metrics is a ratio; I would like to color the ration red, yellow, or green based on percentage values.</P> <P>The "easy" solution is just to display a percentage and we can easily use the interface to set threshold values for the colors. I would really like to display a ration, however.</P> <P>If I use a ratio, I can calculate the percent, use rangemap to set the follow, and then classField to se the color. The problem with this approach is classField is set as deprecated. I would assume if it has been deprecated, they have thought through the use cases and have a way to display one field (the ratio) but use another (the percentage) for coloring, but I haven't figured it out yet.</P> Mon, 10 Jul 2017 19:42:42 GMT https://community.splunk.com/t5/Dashboards-Visualizations/SingleValue-for-Ration-Best-Option-for-Coloring/m-p/300375#M19078 triest 2017-07-10T19:42:42Z https://community.splunk.com/t5/Dashboards-Visualizations/SingleValue-for-Ration-Best-Option-for-Coloring/m-p/300376#M19079 <P>try adding this eval (though you may need to swap the signs/order) to the end of your query:</P> <PRE><CODE>|eval range=case(percentage&gt;xx,"severe",percentage&gt;xx,"elevated",percentage&gt;xx,"low") </CODE></PRE> <P>these colors relate to those values.<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/latest/Viz/SingleValueFormatting#Migration_for_rangemap_settings_in_existing_single_value_visualizations">http://docs.splunk.com/Documentation/Splunk/latest/Viz/SingleValueFormatting#Migration_for_rangemap_settings_in_existing_single_value_visualizations</A></P> <P>and add <CODE>&lt;option name="field"&gt;ratio&lt;/option&gt;</CODE> to your options</P> Mon, 10 Jul 2017 20:43:08 GMT https://community.splunk.com/t5/Dashboards-Visualizations/SingleValue-for-Ration-Best-Option-for-Coloring/m-p/300376#M19079 cmerriman 2017-07-10T20:43:08Z