<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: scale color with value in % in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/scale-color-with-value-in/m-p/396098#M42550</link>
    <description>&lt;P&gt;I use secheduled reports the code is not in xml....&lt;BR /&gt;
    &lt;TABLE&gt;&lt;BR /&gt;
            &lt;SEARCH&gt;&lt;BR /&gt;
              &lt;QUERY&gt;| loadjob savedsearch="admin:toto:tata"&lt;/QUERY&gt;&lt;BR /&gt;
              &lt;EARLIEST&gt;-30d@d&lt;/EARLIEST&gt;&lt;BR /&gt;
              &lt;LATEST&gt;now&lt;/LATEST&gt;&lt;BR /&gt;
            &lt;/SEARCH&gt;&lt;BR /&gt;
            cell&lt;BR /&gt;
            &lt;FORMAT type="color" field="Wear_Rate"&gt;&lt;BR /&gt;
              &lt;COLORPALETTE type="map"&gt;&lt;/COLORPALETTE&gt;&lt;BR /&gt;
            &lt;/FORMAT&gt;&lt;BR /&gt;
          &lt;/TABLE&gt;&lt;/P&gt;</description>
    <pubDate>Sat, 23 Feb 2019 10:57:33 GMT</pubDate>
    <dc:creator>jip31</dc:creator>
    <dc:date>2019-02-23T10:57:33Z</dc:date>
    <item>
      <title>scale color with value in %</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/scale-color-with-value-in/m-p/396096#M42548</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;I need to do a scale color on a value in % but nothing happens&lt;BR /&gt;
my search is&lt;BR /&gt;
    eventtype=Charge &lt;BR /&gt;
    | stats first(FullChargedCapacity) AS FullChargedCapacity first(DesignedCapacity) AS DesignedCapacity first(_time) AS _time BY host &lt;BR /&gt;
    | eval Wear_Rate = 100-(FullChargedCapacity *100/DesignedCapacity) &lt;BR /&gt;
    | where Wear_Rate &amp;gt;5 &lt;BR /&gt;
    | eval Wear_Rate=round(Wear_Rate, 1). " %"&lt;BR /&gt;
    | table time host FullChargedCapacity DesignedCapacity Wear_Rate &lt;/P&gt;

&lt;P&gt;Could you help me please??&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 23:20:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/scale-color-with-value-in/m-p/396096#M42548</guid>
      <dc:creator>jip31</dc:creator>
      <dc:date>2020-09-29T23:20:31Z</dc:date>
    </item>
    <item>
      <title>Re: scale color with value in %</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/scale-color-with-value-in/m-p/396097#M42549</link>
      <description>&lt;P&gt;hmm is it possible to sort Wear_Rate from smallest o largest?&lt;BR /&gt;
If yes, then you need to apply this code to your simple xml&lt;CODE&gt;[#FFFFFF,#006D9C]&lt;BR /&gt;
          &amp;lt;scale type="sharedCategory"&amp;gt;&amp;lt;/scale&amp;gt;&lt;BR /&gt;
        &amp;lt;/format&amp;gt;&lt;/CODE&gt;&lt;/P&gt;

&lt;P&gt;add this just before the  closing tag.This is not exact and you do need to add &lt;CODE&gt;|sort Wear_Rate&lt;/CODE&gt;&lt;BR /&gt;
Check the output and see how it looks&lt;/P&gt;</description>
      <pubDate>Sat, 23 Feb 2019 10:09:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/scale-color-with-value-in/m-p/396097#M42549</guid>
      <dc:creator>Sukisen1981</dc:creator>
      <dc:date>2019-02-23T10:09:25Z</dc:date>
    </item>
    <item>
      <title>Re: scale color with value in %</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/scale-color-with-value-in/m-p/396098#M42550</link>
      <description>&lt;P&gt;I use secheduled reports the code is not in xml....&lt;BR /&gt;
    &lt;TABLE&gt;&lt;BR /&gt;
            &lt;SEARCH&gt;&lt;BR /&gt;
              &lt;QUERY&gt;| loadjob savedsearch="admin:toto:tata"&lt;/QUERY&gt;&lt;BR /&gt;
              &lt;EARLIEST&gt;-30d@d&lt;/EARLIEST&gt;&lt;BR /&gt;
              &lt;LATEST&gt;now&lt;/LATEST&gt;&lt;BR /&gt;
            &lt;/SEARCH&gt;&lt;BR /&gt;
            cell&lt;BR /&gt;
            &lt;FORMAT type="color" field="Wear_Rate"&gt;&lt;BR /&gt;
              &lt;COLORPALETTE type="map"&gt;&lt;/COLORPALETTE&gt;&lt;BR /&gt;
            &lt;/FORMAT&gt;&lt;BR /&gt;
          &lt;/TABLE&gt;&lt;/P&gt;</description>
      <pubDate>Sat, 23 Feb 2019 10:57:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/scale-color-with-value-in/m-p/396098#M42550</guid>
      <dc:creator>jip31</dc:creator>
      <dc:date>2019-02-23T10:57:33Z</dc:date>
    </item>
    <item>
      <title>Re: scale color with value in %</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/scale-color-with-value-in/m-p/396099#M42551</link>
      <description>&lt;P&gt;Hmmm there is a problem then &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;BR /&gt;
Basically, you can not apply a scale to a string,whether you use eval or fieldformat.&lt;BR /&gt;
Is a work around possible? Instead of using  &lt;CODE&gt;| eval Wear_Rate=round(Wear_Rate, 1). " %"&lt;/CODE&gt;&lt;BR /&gt;
can you use something like &lt;CODE&gt;| eval Wear_Rate_percentage=round(Wear_Rate, 1)&lt;/CODE&gt;&lt;BR /&gt;
and then you can use the default scale coloring.&lt;BR /&gt;
So that your column remains a number and you intimate users through the column heading that this is a percentage figure?&lt;/P&gt;</description>
      <pubDate>Sat, 23 Feb 2019 12:16:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/scale-color-with-value-in/m-p/396099#M42551</guid>
      <dc:creator>Sukisen1981</dc:creator>
      <dc:date>2019-02-23T12:16:25Z</dc:date>
    </item>
    <item>
      <title>Re: scale color with value in %</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/scale-color-with-value-in/m-p/396100#M42552</link>
      <description>&lt;P&gt;Thank you.&lt;/P&gt;</description>
      <pubDate>Sat, 23 Feb 2019 15:00:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/scale-color-with-value-in/m-p/396100#M42552</guid>
      <dc:creator>jip31</dc:creator>
      <dc:date>2019-02-23T15:00:29Z</dc:date>
    </item>
  </channel>
</rss>

