topic Re: replacing no results found with 0 with a color in Splunk dashboard in Dashboards & Visualizations

replacing no results found with 0 with a color in Splunk dashboard

anil1219 — Fri, 19 Jul 2024 22:12:11 GMT

Hi Team,

How to replace no results found with 0 with a color in Splunk dashboard.

I know that by appending below it update 'no results found' with 0 value.

| appendpipe [stats count | where count=0]

But it comes with red color as 0 value, I want to change to green color.

even if I have changed Format Visualization --> Color range

from 0-5 as Green

5-max as Red

Could you please let me know how I can get green color with value as 0 when there is 'no results found'

Re: replacing no results found with 0 with a color in Splunk dashboard

anil1219 — Fri, 19 Jul 2024 18:50:14 GMT

Re: replacing no results found with 0 with a color in Splunk dashboard

gcusello — Sat, 20 Jul 2024 08:49:23 GMT

Hi @anil1219 ,

there a request in Splunk ideas to add a feature to do this, please upvote it!

Anyway, using the solution you shared you should have 0 instead of "no results found".

For the green colour, in the classical interface dashboards (I'm not srìtill using Dashboard Studio) you should click on the pencil button in the panel of your dashboard.

Then you can choose the colour and set the range for your colours.

Ciao.

Giuseppe

Re: replacing no results found with 0 with a color in Splunk dashboard

ITWhisperer — Sat, 20 Jul 2024 09:12:58 GMT

Try something like this

| appendpipe [| stats count as "Total impact %"| where 'Total impact %'=0]