<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Calendar Heatmap Visualization colors in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341796#M22221</link>
    <description>&lt;P&gt;@cusello, Black cells are displayed in Calendar Heat Map when the statistical value for specific time period is not numeric. So you can try use &lt;CODE&gt;fillnull&lt;/CODE&gt; command to replace null with 0 or some default high or low number to apply color as per your range. If your data already has 0 Heatmap should adjust color ranges accordingly.&lt;/P&gt;

&lt;P&gt;I would also request you to check out Punchcard Custom Visualization which depicts information similar to Timechart but gives more hover options. Bubbles in Punchcard can be set to specific size based on value as well. So, Null value bubble will not be present at all.&lt;/P&gt;</description>
    <pubDate>Thu, 02 Nov 2017 13:33:42 GMT</pubDate>
    <dc:creator>niketn</dc:creator>
    <dc:date>2017-11-02T13:33:42Z</dc:date>
    <item>
      <title>Calendar Heatmap Visualization colors</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341795#M22220</link>
      <description>&lt;P&gt;Hi at all,&lt;BR /&gt;
I'd like to use Heatmap Visualization but I'm not able to change blocks colors.&lt;BR /&gt;
I'm able to change min and max color and the intermediate values but I don't know how to change blocks color when value is 0 or NULL that usually is black (it isn't good for a user to see AS KPI a black cell, it could think that there's a problem instead value is 0!): I didn't find any option to do this, because min value is never 0.&lt;BR /&gt;
Anyone has any idea?&lt;BR /&gt;
Bye.&lt;BR /&gt;
Giuseppe&lt;/P&gt;</description>
      <pubDate>Thu, 02 Nov 2017 10:23:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341795#M22220</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2017-11-02T10:23:57Z</dc:date>
    </item>
    <item>
      <title>Re: Calendar Heatmap Visualization colors</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341796#M22221</link>
      <description>&lt;P&gt;@cusello, Black cells are displayed in Calendar Heat Map when the statistical value for specific time period is not numeric. So you can try use &lt;CODE&gt;fillnull&lt;/CODE&gt; command to replace null with 0 or some default high or low number to apply color as per your range. If your data already has 0 Heatmap should adjust color ranges accordingly.&lt;/P&gt;

&lt;P&gt;I would also request you to check out Punchcard Custom Visualization which depicts information similar to Timechart but gives more hover options. Bubbles in Punchcard can be set to specific size based on value as well. So, Null value bubble will not be present at all.&lt;/P&gt;</description>
      <pubDate>Thu, 02 Nov 2017 13:33:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341796#M22221</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2017-11-02T13:33:42Z</dc:date>
    </item>
    <item>
      <title>Re: Calendar Heatmap Visualization colors</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341797#M22222</link>
      <description>&lt;P&gt;@cusello, Black cells are displayed in Calendar Heat Map when the statistical value for specific time period is not numeric. So you can try use &lt;CODE&gt;fillnull&lt;/CODE&gt; command to replace null with 0 or some default high or low number to apply color as per your range. If your data already has 0 Heatmap should adjust color ranges accordingly.&lt;/P&gt;

&lt;P&gt;I would also request you to check out Punchcard Custom Visualization which depicts information similar to Timechart but gives more hover options. Bubbles in Punchcard can be set to specific size based on value as well. So, Null value bubble will not be present at all.&lt;/P&gt;</description>
      <pubDate>Thu, 02 Nov 2017 13:33:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341797#M22222</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2017-11-02T13:33:43Z</dc:date>
    </item>
    <item>
      <title>Re: Calendar Heatmap Visualization colors</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341798#M22223</link>
      <description>&lt;P&gt;Hi niketnilay,&lt;BR /&gt;
thank you for your quick answer.&lt;/P&gt;

&lt;P&gt;I have in black both cells without values and cells with value=0.&lt;BR /&gt;
I had the dubt that values was in not numeric format but I verified format with typeof function and they are all numeric, infact I can sum them.&lt;/P&gt;

&lt;P&gt;This is my search where Day is the date of execution of a VM and KPI_Average is a calculation of many KPIs, values are in a Summary:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=my_summary
| search host="myhost"
| eval _time=strptime(Day,"%d/%m/%Y")
| fillnull KPI_Average
| timechart span=1d sum(KPI_Average) AS KPI_Average
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I'm trying Bubbles in Punchcard,&lt;/P&gt;

&lt;P&gt;Bye.&lt;BR /&gt;
Giuseppe&lt;/P&gt;</description>
      <pubDate>Thu, 02 Nov 2017 13:58:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341798#M22223</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2017-11-02T13:58:20Z</dc:date>
    </item>
    <item>
      <title>Re: Calendar Heatmap Visualization colors</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341799#M22224</link>
      <description>&lt;P&gt;Hi Giuseppe, &lt;/P&gt;

&lt;P&gt;I am not sure if it is typo but seems fillnull is reversed.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt; index=my_summary  host="myhost"
 | eval _time=strptime(Day,"%d/%m/%Y")
 | timechart span=1d sum(KPI_Average) AS KPI_Average
 | fillnull value=0 KPI_Average
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;You can validate results/rows in Table as well. Ideally 0's will be Grey in Calendar Heat Map.&lt;/P&gt;

&lt;P&gt;If you are testing Punchcard, hopefully you will like it better.&lt;/P&gt;</description>
      <pubDate>Thu, 02 Nov 2017 14:11:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341799#M22224</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2017-11-02T14:11:21Z</dc:date>
    </item>
    <item>
      <title>Re: Calendar Heatmap Visualization colors</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341800#M22225</link>
      <description>&lt;P&gt;Solved!&lt;BR /&gt;
Thank you.&lt;BR /&gt;
Bye.&lt;BR /&gt;
Giuseppe&lt;/P&gt;</description>
      <pubDate>Thu, 02 Nov 2017 14:28:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341800#M22225</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2017-11-02T14:28:48Z</dc:date>
    </item>
    <item>
      <title>Re: Calendar Heatmap Visualization colors</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341801#M22226</link>
      <description>&lt;P&gt;Anytime &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 02 Nov 2017 14:33:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341801#M22226</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2017-11-02T14:33:46Z</dc:date>
    </item>
    <item>
      <title>Re: Calendar Heatmap Visualization colors</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341802#M22227</link>
      <description>&lt;P&gt;I spoke too early:&lt;BR /&gt;
this is true if there's at least one value not zero, if all the values are 0 or NULL all the cells are black!&lt;BR /&gt;
Bye.&lt;BR /&gt;
Giuseppe&lt;/P&gt;</description>
      <pubDate>Thu, 02 Nov 2017 14:36:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341802#M22227</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2017-11-02T14:36:35Z</dc:date>
    </item>
    <item>
      <title>Re: Calendar Heatmap Visualization colors</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341803#M22228</link>
      <description>&lt;P&gt;This is still surprising. Timechart command with fillnull should make the buckets continuous and ideally not leave any NULL range.&lt;/P&gt;</description>
      <pubDate>Fri, 03 Nov 2017 02:33:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Calendar-Heatmap-Visualization-colors/m-p/341803#M22228</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2017-11-03T02:33:20Z</dc:date>
    </item>
  </channel>
</rss>

