https://community.splunk.com/t5/Splunk-Search/Grouping-values-in-bar-chart-when-using-inline-search/m-p/48259#M11531 <P>I assume you have a HiddenChartFormatter stanza somewhere in your xml. If so, try adding a statement like this to it:</P> <P>&lt;param name="charting.fieldColors"&gt;{"Value1":0x00FF00,"Value2":0xFF0000,"Value3":0xFF0000}&lt;/param&gt;</P> Fri, 01 Mar 2013 13:34:57 GMT richgalloway 2013-03-01T13:34:57Z https://community.splunk.com/t5/Splunk-Search/Grouping-values-in-bar-chart-when-using-inline-search/m-p/48258#M11530 <P>Using the search app I can run a search like this:</P> <P><SEARCH ...=""> | chart avg(callcount) by sp_day sp </SEARCH></P> <P>which gives me a bar chart where<BR /> - there is a bar for each combination of sp_day / sp<BR /> - <THIS is="" the="" important="" bit=""> bars are colored according to the value of sp</THIS></P> <P>When I try to code this in my dashboard xml I have to drop the "| chart ..." from the end of the search term and then all the bars are always just drawn in the same color. How can I reproduce the behaviour from the search app on my dashboard?</P> Fri, 01 Mar 2013 13:00:39 GMT https://community.splunk.com/t5/Splunk-Search/Grouping-values-in-bar-chart-when-using-inline-search/m-p/48258#M11530 MatMeredith 2013-03-01T13:00:39Z https://community.splunk.com/t5/Splunk-Search/Grouping-values-in-bar-chart-when-using-inline-search/m-p/48259#M11531 <P>I assume you have a HiddenChartFormatter stanza somewhere in your xml. If so, try adding a statement like this to it:</P> <P>&lt;param name="charting.fieldColors"&gt;{"Value1":0x00FF00,"Value2":0xFF0000,"Value3":0xFF0000}&lt;/param&gt;</P> Fri, 01 Mar 2013 13:34:57 GMT https://community.splunk.com/t5/Splunk-Search/Grouping-values-in-bar-chart-when-using-inline-search/m-p/48259#M11531 richgalloway 2013-03-01T13:34:57Z