topic Re: Add image to search in Splunk Search

Add image to search

pinzer — Tue, 14 Sep 2010 15:08:49 GMT

Hi, i need to add an image like green, yellow, red to a rangemap search. Instead of the string of the rangemap.

eventtype="searchIPS1" | chart count | rangemap field=count GREEN-IMAGE=1-30 YELLOW-IMAGE=31-39 RED-IMAGE=40-5900 default=GRAY-IMAGE

Something like this it's possible?
thanks

Re: Add image to search

ftk — Tue, 14 Sep 2010 19:27:29 GMT

Take a look at the iconify search command. You may be able to achieve your goal with it.

Re: Add image to search

pinzer — Tue, 14 Sep 2010 22:44:35 GMT

thanks but is not what i'm searching

Re: Add image to search

hazekamp — Wed, 30 Mar 2011 11:43:17 GMT

If you are using the SingleValue module via Advanced XML on a Splunk dashboard you can override the default look/feel of the range via $SPLUNK_HOME/etc/apps/$your_app$/appserver/static/application.css.

We do this in ESS like so (here we are overriding the default low/elevated/severe values):

.SingleValue .severe {
    background-color: transparent;
    background-image: url('images/high.png');
    color: #333333;
}

.SingleValue .elevated {
    background-color: transparent;
    background-image: url('images/medium.png');
    color: #333333;
}

.SingleValue .low {
    background-color: transparent;
    background-image: url('images/low.png');
    color: #333333;
}

There are some advanced things you can do as well...For instance, SingleValue takes an "additionalClass" parameter such that you can specify "An optional additional css class name to add to the result container".