topic Re: Are there Different Dashboard Colors since Update to 9.0.2? in Dashboards & Visualizations

Are there different dashboard colors since update to 9.0.2?

blablabla — Fri, 26 May 2023 12:19:14 GMT

Hello all,

since our Update to Splunk Enterprise 9.0.2 we experienced, that the Dashboard colors (Simple XML) changed completely. And the new colors are terrible! Did someone experience something similar after the update? And if yes: Were you able to get the colors back to the way they were?

On 8.2.2.3

On 9.0.2

I would appreciate every hint. The new colors are something that cannot be presented to management 🙈

Thanks and best Regards

Re: Are there Different Dashboard Colors since Update to 9.0.2?

SplunkingKnight — Mon, 27 Feb 2023 15:50:48 GMT

Hello,

we have the same problem after updating to version 9.0.2. Has anyone already found a way to turn the dashboard color scheme back to the previous state?

Best regards

Re: Are there Different Dashboard Colors since Update to 9.0.2?

blablabla — Mon, 27 Feb 2023 16:01:22 GMT

Hi @SplunkingKnight

up to now the only solution seems to be overwriting the colors according to this post.

As far as I understood, the reason for the new colors is to meet the minimum requirement for regulations for visually impaired people (A11y_WCAG).

But yeah, would have been nice, if the new colors would have been a configurable option that users, who are visually impaired, could select. 🤔

Best regards

Re: Are there Different Dashboard Colors since Update to 9.0.2?

SplunkingKnight — Tue, 28 Feb 2023 10:14:52 GMT

Hi @blablabla,

thanks for your feedback. Overwriting the default colors using the seriesColors parameter works in principle, but I have not been able to find a color scheme that looks at least reasonably good.

Do you or anyone else have the hexcodes of the old color scheme from the 8.x version of Splunk?

Best regards

Re: Are there Different Dashboard Colors since Update to 9.0.2?

blablabla — Tue, 28 Feb 2023 10:27:47 GMT

Hi @SplunkingKnight

I used this color scheme

I am not sure though, what is the behavour, if your plot would need more colors than defined.

Best regards

Re: Are there Different Dashboard Colors since Update to 9.0.2?

diogofgm — Tue, 28 Feb 2023 10:31:28 GMT

The following docs page has a list of the default hex codes for charts, although I believe that they are not update, at least not in the v9.x docs.

https://docs.splunk.com/Documentation/Splunk/8.2.2/Viz/ChartConfigurationReference

*Default value for charting.seriesColors:

[0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440, 0x3863a0, 0xa2cc3e, 0xcc5068, 0x73427f, 0x11a88b, 0xea9600, 0x0e776d, 0xffb380, 0xaa3977, 0x91af27, 0x4453aa, 0x99712b, 0x553577, 0x97bc71, 0xd35c2d, 0x314d5b, 0x99962b, 0x844539, 0x00b290, 0xe2c188, 0xa34a41, 0x44416d, 0xe29847, 0x8c8910, 0x0b416d, 0x774772, 0x3d9988, 0xbdbd5e, 0x5f7396, 0x844539]

Re: Are there Different Dashboard Colors since Update to 9.0.2?

blablabla — Tue, 28 Feb 2023 10:32:57 GMT

Thanks for posting. At least for me this series did not yield the colours like before. I think the order is maybe not right 🤔

Re: Are there Different Dashboard Colors since Update to 9.0.2?

SplunkingKnight — Tue, 28 Feb 2023 13:33:14 GMT

Hi @blablabla, @diogofgm,

thank you for the color series. With both of them the dashboards look much better than with the new default settings of Splunk.

Unfortunately, I have not yet managed to globally enable these color series via the display.visualizations.charting.seriesColors setting in ui-prefs.conf. The setting does not work and a btool check throws the following error message:

Invalid key in stanza [default] in /opt/splunk/etc/system/local/ui-prefs.conf, line 18: display.visualizations.charting.seriesColors (value: [0x006d9c,0x4fa484,0xf59e63,0xb4595c,0x62b3b2,0x284b6a]).

Have you managed to set this setting globally?

Btw. there is even an official support knowledge base article about this topic -> https://splunk.my.site.com/customer/s/article/Changing-the-color-schema-across-dashboards-and-visualizations

Best regards

Re: Are there Different Dashboard Colors since Update to 9.0.2?

SplunkingKnight — Mon, 27 Mar 2023 08:16:21 GMT

Hello @all,

in collaboration with Splunk Support, we were able to work out the following workarounds for the general customization of the dashboard color scheme:

Workaround for new and existing Classic Dashboards, as well as for Dashboard Studio Dashboards newly created from a Splunk search (save as...):

Set parameter display.visualizations.charting.seriesColors in savedsearches.conf as follows:

[default] display.visualizations.charting.seriesColors = [0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440, 0x3863a0, 0xa2cc3e, 0xcc5068, 0x73427f, 0x11a88b, 0xea9600, 0x0e776d, 0xffb380, 0xaa3977, 0x91af27, 0x4453aa, 0x99712b, 0x553577, 0x97bc71, 0xd35c2d, 0x314d5b, 0x99962b, 0x844539, 0x00b290, 0xe2c188, 0xa34a41, 0x44416d, 0xe29847, 0x8c8910, 0x0b416d, 0x774772, 0x3d9988, 0xbdbd5e, 0x5f7396, 0x844539]

Attention:
Since this is an undocumented parameter, the following error is thrown in the btool check:

Invalid key in stanza [default] in /opt/splunk/etc/system/local/savedsearches.conf, line 18: display.visualizations.charting.seriesColors (value: [0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440, 0x3863a0, 0xa2cc3e, 0xcc5068, 0x73427f, 0x11a88b, 0xea9600, 0x0e776d, 0xffb380, 0xaa3977, 0x91af27, 0x4453aa, 0x99712b, 0x553577, 0x97bc71, 0xd35c2d, 0x314d5b, 0x99962b, 0x844539, 0x00b290, 0xe2c188, 0xa34a41, 0x44416d, 0xe29847, 0x8c8910, 0x0b416d, 0x774772, 0x3d9988, 0xbdbd5e, 0x5f7396, 0x844539]).

Workaround for existing Dashboard Studio dashboards as well as for Dashboard Studio dashboards newly created from "Create Dashboard":

Edit Dashboard > Source > Insert seriesColors parameter as follows:

"visualizations": { … "options": { … "seriesColors": "[0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440, 0x3863a0, 0xa2cc3e, 0xcc5068, 0x73427f, 0x11a88b, 0xea9600, 0x0e776d, 0xffb380, 0xaa3977, 0x91af27, 0x4453aa, 0x99712b, 0x553577, 0x97bc71, 0xd35c2d, 0x314d5b, 0x99962b, 0x844539, 0x00b290, 0xe2c188, 0xa34a41, 0x44416d, 0xe29847, 0x8c8910, 0x0b416d, 0x774772, 0x3d9988, 0xbdbd5e, 0x5f7396, 0x844539]" },

Modification of ui-prefs.conf configuration file is not required in any of the cases.

Best regards

Re: Are there Different Dashboard Colors since Update to 9.0.2?

splunkreal — Fri, 26 May 2023 08:22:31 GMT

Thanks, working in 9.0.4.1 🙂

Re: Are there Different Dashboard Colors since Update to 9.0.2?

Martin_Doering — Tue, 10 Oct 2023 13:43:38 GMT

These series colors from the documentation are not the real colors used. Instead, the colors are as follows (taken from $SPLUNK_HOME$/share/splunk/search_mrsparkle/exposed/js/splunk/palettes/ColorCodes.js):

[0x006d9c, 0x4fa484, 0xec9960, 0xaf575a, 0xb6c75a, 0x62b3b2, 0x294e70, 0x738795, 0xedd051, 0xbd9872, 0x5a4575, 0x7ea77b, 0x708794, 0xd7c6b7, 0x339bb2, 0x55672d, 0xe6e1ae, 0x96907f, 0x87bc65, 0xcf7e60, 0x7b5547, 0x77d6d8, 0x4a7f2c, 0xf589ad, 0x6a2c5d, 0xaaabae, 0x9a7438, 0xa4d563, 0x7672a4, 0x184b81, 0x7fb6ce, 0xa7d2c2, 0xf6ccb0, 0xd7abad, 0xdbe3ad, 0xb1d9d9, 0x94a7b8, 0xb9c3ca, 0xf6e8a8, 0xdeccb9, 0xb7acca, 0xb2cab0, 0xa5b2bf, 0xe9ddd4, 0x66c3d0, 0xaab396, 0xf3f0d7, 0xc1bcb3, 0xb6d7a3, 0xe1b2a1, 0xdec4ba, 0xabe6e8, 0x91b282, 0xf8b7ce, 0xcba3c2, 0xcccdce, 0xc3ab89, 0xc7e6a3, 0xada9c8, 0xa4bbe0]

Re: Are there Different Dashboard Colors since Update to 9.0.2?

robertlynch2020 — Wed, 31 Jan 2024 14:49:04 GMT

HI @SplunkingKnight

Not sure what I am doing wrong here. I am setting it in local on my app.

But I am getting this on a startup.

An the colors are still very bright.

I am using this to applay it

any help would be great -