topic Display barchart of a dashboard with each bar in a different color based on the value in Dashboards & Visualizations

Display barchart of a dashboard with each bar in a different color based on the value

saichandjawari — Mon, 16 Dec 2019 15:41:53 GMT

I have a dashboard panel with a simple query, which gives top 20 values of the event. For example, I am searching for number of customers of top 20 countries of my product. As expected each country comes up with a unique value. Hence I need each cauntry should be given a unique color in the bar chart of a dashboard while each bar represents a unique country. Please suggest. Thanks!

Re: Display barchart of a dashboard with each bar in a different color based on the value

woodcock — Mon, 16 Dec 2019 15:53:02 GMT

You need the charting.fieldColors setting:
https://docs.splunk.com/Documentation/Splunk/latest/Viz/ChartConfigurationReference

Re: Display barchart of a dashboard with each bar in a different color based on the value

vnravikumar — Mon, 16 Dec 2019 16:08:45 GMT

Check this

<dashboard>
  <label>chart color</label>
  <row>
    <panel>
      <chart>
        <search>
          <query>index=_internal |top limit=5 sourcetype
          | transpose 0 header_field=sourcetype|search column=count</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="charting.chart">bar</option>
        <option name="charting.drilldown">none</option>
        <option name="charting.seriesColors">[0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440]</option>
        <option name="refresh.display">progressbar</option>
      </chart>
    </panel>
  </row>
</dashboard>

Re: Display barchart of a dashboard with each bar in a different color based on the value

saichandjawari — Tue, 17 Dec 2019 10:16:06 GMT

vnravikumar, thanks! That worked for me. Can you please let me know the logic behind naming convention of colors?

Re: Display barchart of a dashboard with each bar in a different color based on the value

woodcock — Tue, 17 Dec 2019 16:05:18 GMT

This answer allows you to pick the color pallet but Splunk assigns the colors as it chooses. If you need to map certain colors to certain values, then this is not the right way to do it; see my answer for the correct method.