https://community.splunk.com/t5/Dashboards-Visualizations/charting-an-event-with-a-binary-state/m-p/72585#M3929 <P>I'm looking to create a view that shows whether a service is up or down. Does anyone have an example of how to chart a sort of green light/red light display on a view?</P> Fri, 01 Apr 2011 01:04:16 GMT dang 2011-04-01T01:04:16Z https://community.splunk.com/t5/Dashboards-Visualizations/charting-an-event-with-a-binary-state/m-p/72585#M3929 <P>I'm looking to create a view that shows whether a service is up or down. Does anyone have an example of how to chart a sort of green light/red light display on a view?</P> Fri, 01 Apr 2011 01:04:16 GMT https://community.splunk.com/t5/Dashboards-Visualizations/charting-an-event-with-a-binary-state/m-p/72585#M3929 dang 2011-04-01T01:04:16Z https://community.splunk.com/t5/Dashboards-Visualizations/charting-an-event-with-a-binary-state/m-p/72586#M3930 <P>dang,</P> <P>Assuming you have a field called 'state' with binary values 0/1 you could do something like:</P> <PRE><CODE>&lt;my search&gt; | head 1 | rangemap field=state low=0 default=severe </CODE></PRE> <P>In the above search "head 1" get's us the last state. You could also do this with 'stats last(state)'. Rangemap is a command that maps field values into ranges. In this case we map 0 to low (green) and 1 to severe (red)</P> <P>See also:</P> <P><A href="http://answers.splunk.com/questions/6777/add-image-to-search/13265#13265" rel="nofollow">http://answers.splunk.com/questions/6777/add-image-to-search/13265#13265</A></P> <P><A href="http://answers.splunk.com/questions/7732/rangemap-command" rel="nofollow">http://answers.splunk.com/questions/7732/rangemap-command</A></P> <P><A href="http://www.splunk.com/base/Documentation/4.2/Developer/AddASingleButton" rel="nofollow">http://www.splunk.com/base/Documentation/4.2/Developer/AddASingleButton</A></P> Fri, 01 Apr 2011 01:40:58 GMT https://community.splunk.com/t5/Dashboards-Visualizations/charting-an-event-with-a-binary-state/m-p/72586#M3930 hazekamp 2011-04-01T01:40:58Z