topic Re: Want to add color to table fields in Dashboards & Visualizations

Want to add color to table fields

Ashish0405 — Mon, 26 May 2025 09:58:49 GMT

Hi Team,

I have added Red & Green color to Status column, I want to add the same to severity column as well.

Can some one suggest me some commands

I have used below commands to add color to status field.

<option name="drilldown">none</option>
<option name="refresh.display">progressbar</option>
<format type="color" field="Status">
<colorPalette type="map">{"failed":#D93F3C,"finished":#31A35F,"Critical":#D93F3C,"Informational":#31A35F}</colorPalette>
</format>

Re: Want to add color to table fields

gcusello — Mon, 26 May 2025 10:04:08 GMT

Hi @Ashish0405 ,

you have to follow the same process.

or copy the option

<format type="color" field="Severity"> <colorPalette type="map"> {"failed":#D93F3C,"finished":#31A35F,"Critical":#D93F3C,"Informational":#31A35F}</colorPalette> </format>

obviously changing the values of the Severity field.

Ciao.

Giuseppe

Re: Want to add color to table fields

kiran_panchavat — Mon, 26 May 2025 12:50:03 GMT

@Ashish0405

<dashboard version="1.1">
<label>Status &amp; Severity Coloring</label>
<row>
<panel>
<title>Test Status and Severity</title>
<table>
<search>
<query>
<![CDATA[
| makeresults count=4
| streamstats count as id
| eval Status=case(id==1, "failed", id==2, "finished", id==3, "finished", 1==1, "failed")
| eval Severity=case(id==1, "Critical", id==2, "Informational", id==3, "Critical", 1==1, "Informational")
]]>
</query>
</search>
<option name="drilldown">none</option>
<option name="refresh.display">progressbar</option>
<format type="color" field="Status">
<colorPalette type="map">{&quot;failed&quot;:&quot;#D93F3C&quot;,&quot;finished&quot;:&quot;#31A35F&quot;}</colorPalette>
</format>
<format type="color" field="Severity">
<colorPalette type="map">{&quot;Critical&quot;:&quot;#D93F3C&quot;,&quot;Informational&quot;:&quot;#31A35F&quot;}</colorPalette>
</format>
</table>
</panel>
</row>
</dashboard>

Re: Want to add color to table fields

livehybrid — Mon, 26 May 2025 16:05:56 GMT

Hi @Ashish0405

Just add another <format> under the existing one such as:

<format type="color" field="Severity"> <colorPalette type="map">{"Critical":#D93F3C,"Informational":#31A35F}</colorPalette> </format>

Full example:

<dashboard version="1.1"> <label>Demo</label> <row> <panel> <table> <search> <query>|makeresults | eval Status="failed", Severity="Critical" | append [makeresults | eval Status="finished", Severity="Informational"]</query> <earliest>-24h@h</earliest> <latest>now</latest> <sampleRatio>1</sampleRatio> </search> <option name="drilldown">none</option> <option name="refresh.display">progressbar</option> <format type="color" field="Status"> <colorPalette type="map">{"failed":#D93F3C,"finished":#31A35F,"Critical":#D93F3C,"Informational":#31A35F}</colorPalette> </format> <format type="color" field="Severity"> <colorPalette type="map">{"Critical":#D93F3C,"Informational":#31A35F}</colorPalette> </format> </table> </panel> </row> </dashboard>

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful
Marking it as the solution if it resolved your issue
Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Edit - Sorry just seen the other replies which I hadnt noticed before, not meaning to step on others toes!

Re: Want to add color to table fields

Ashish0405 — Mon, 02 Jun 2025 06:02:35 GMT

Thank you, that's worked

Re: Want to add color to table fields

Ashish0405 — Mon, 02 Jun 2025 06:02:58 GMT

Thank you that's worked

Re: Want to add color to table fields

gcusello — Mon, 02 Jun 2025 06:36:11 GMT

Hi @Ashish0405 ,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated by all the contributors 😉