<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Rangemap with String Values in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Rangemap-with-String-Values/m-p/92033#M5013</link>
    <description>&lt;P&gt;You can use |eval range=case(..) to deal with strings&lt;/P&gt;

&lt;P&gt;Example:&lt;BR /&gt;
 |eval range=case(fldColor=="green", "low", 1==1, "severe") &lt;/P&gt;</description>
    <pubDate>Wed, 18 May 2016 22:47:34 GMT</pubDate>
    <dc:creator>swaraj_appala</dc:creator>
    <dc:date>2016-05-18T22:47:34Z</dc:date>
    <item>
      <title>Rangemap with String Values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Rangemap-with-String-Values/m-p/92031#M5011</link>
      <description>&lt;P&gt;I want to use a rangemap to create a single value panel. The issue is that the field I want to colur hold string values (e.g. "Colour_1", "Colour_2" or "Colour_3")&lt;/P&gt;

&lt;P&gt;rangemap requires numbers. Is there a way to fiddle with the strings to get them to work with rangemap?&lt;/P&gt;

&lt;P&gt;sourcetype="ANM_UK_Grocery" fldDX="DX_1" fldBank="Bank_1" | head 1 | table fldColour,fldBank,fldDX |  rangemap fldColour=Color low="Colour_1" severe="Colour_2" elevated="Colour_3"&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 11:30:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Rangemap-with-String-Values/m-p/92031#M5011</guid>
      <dc:creator>aleem</dc:creator>
      <dc:date>2020-09-28T11:30:51Z</dc:date>
    </item>
    <item>
      <title>Re: Rangemap with String Values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Rangemap-with-String-Values/m-p/92032#M5012</link>
      <description>&lt;P&gt;I used the following command to change Colour_1 to 1&lt;/P&gt;

&lt;P&gt;eval fldColour=replace(fldColour, "Colour_", "")&lt;/P&gt;

&lt;P&gt;Works fine&lt;/P&gt;</description>
      <pubDate>Wed, 14 Mar 2012 16:46:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Rangemap-with-String-Values/m-p/92032#M5012</guid>
      <dc:creator>aleem</dc:creator>
      <dc:date>2012-03-14T16:46:21Z</dc:date>
    </item>
    <item>
      <title>Re: Rangemap with String Values</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Rangemap-with-String-Values/m-p/92033#M5013</link>
      <description>&lt;P&gt;You can use |eval range=case(..) to deal with strings&lt;/P&gt;

&lt;P&gt;Example:&lt;BR /&gt;
 |eval range=case(fldColor=="green", "low", 1==1, "severe") &lt;/P&gt;</description>
      <pubDate>Wed, 18 May 2016 22:47:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Rangemap-with-String-Values/m-p/92033#M5013</guid>
      <dc:creator>swaraj_appala</dc:creator>
      <dc:date>2016-05-18T22:47:34Z</dc:date>
    </item>
  </channel>
</rss>

