https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442418#M29177 <P>its skipping the values which are less than 1.. any other way?</P> Tue, 05 Feb 2019 09:57:16 GMT roopeshetty 2019-02-05T09:57:16Z https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442416#M29175 <P>Hi,</P> <P>We have a field by name “Scores”, which has values in numbers that vary from -99 to 399. Now we need to run a “rangemap” query on them so that we can categorize them as below;</P> <P>-99 to 1=Poor<BR /> 2 to 150=Average<BR /> 151 to 200=Good<BR /> 201 to 399=Excellent</P> <P>We are running the query as something like this, but it is not working as expected;</P> <PRE><CODE>| rangemap field= Scores Poor=-99-1 Average=2-150 Good=151-200 default=Excellent </CODE></PRE> <P>Can someone tell us what’s wrong with this above query?</P> Fri, 01 Feb 2019 13:16:41 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442416#M29175 roopeshetty 2019-02-01T13:16:41Z https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442417#M29176 <P>You can make your own <CODE>rangemap</CODE> command with <CODE>eval</CODE> like this:</P> <PRE><CODE>... | eval range = case(Scores&lt;-99, "Excellent", Scores&lt;=1,"Poor", Scores&lt;=150, "Average", Scores&lt;=200, "Good", true(), "Excellent") </CODE></PRE> Fri, 01 Feb 2019 17:49:03 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442417#M29176 woodcock 2019-02-01T17:49:03Z https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442418#M29177 <P>its skipping the values which are less than 1.. any other way?</P> Tue, 05 Feb 2019 09:57:16 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442418#M29177 roopeshetty 2019-02-05T09:57:16Z https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442419#M29178 <P>If this is cut and paste from your actual query, lose the space between field= and Scores. <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Tue, 05 Feb 2019 10:44:24 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442419#M29178 knielsen 2019-02-05T10:44:24Z https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442420#M29179 <P>I have updated my answer to more accurately match.</P> Tue, 05 Feb 2019 15:02:36 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442420#M29179 woodcock 2019-02-05T15:02:36Z https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442421#M29180 <P>hi ,<BR /> now getting error as "Unbalanced quotes"</P> Wed, 13 Feb 2019 12:05:03 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442421#M29180 roopeshetty 2019-02-13T12:05:03Z https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442422#M29181 <P>Fixed one more typo. Good to go now. </P> Wed, 13 Feb 2019 16:17:27 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Can-you-help-me-with-an-issue-with-the-rangemap-command/m-p/442422#M29181 woodcock 2019-02-13T16:17:27Z