https://community.splunk.com/t5/Splunk-Search/How-to-apply-color-to-a-field-with-multiple-values-appended/m-p/466745#M131391 <PRE><CODE>JobExecutionTime 2652.180000 3462.840000 823.780000 </CODE></PRE> <P>I have a field named JobExecutionTime and i have it as a list of values not as seperate rows, How Can i apply color to the values based on some range. I have tried colorpalette rangemap but none seems to work but for seperate rows it is working(by which i mean is that if it is a single row with all values appended rangemap and color palette is not working. However if i have multiple rows with one value in each row rangemap and colorpalette is working). I do not need js and css as it won't be able for client to edit if they need to change the range.</P> Mon, 28 Oct 2019 12:02:49 GMT kavyamohan 2019-10-28T12:02:49Z https://community.splunk.com/t5/Splunk-Search/How-to-apply-color-to-a-field-with-multiple-values-appended/m-p/466745#M131391 <PRE><CODE>JobExecutionTime 2652.180000 3462.840000 823.780000 </CODE></PRE> <P>I have a field named JobExecutionTime and i have it as a list of values not as seperate rows, How Can i apply color to the values based on some range. I have tried colorpalette rangemap but none seems to work but for seperate rows it is working(by which i mean is that if it is a single row with all values appended rangemap and color palette is not working. However if i have multiple rows with one value in each row rangemap and colorpalette is working). I do not need js and css as it won't be able for client to edit if they need to change the range.</P> Mon, 28 Oct 2019 12:02:49 GMT https://community.splunk.com/t5/Splunk-Search/How-to-apply-color-to-a-field-with-multiple-values-appended/m-p/466745#M131391 kavyamohan 2019-10-28T12:02:49Z https://community.splunk.com/t5/Splunk-Search/How-to-apply-color-to-a-field-with-multiple-values-appended/m-p/466746#M131392 <P>What would you want the range to be? I would imagine you either want to take the min, max, or average in a <CODE>stats</CODE> command, or you would want to separate each of these into their own rows with an <CODE>mvexpand</CODE> command. I don't know if applying a single value range over a multivalue field makes sense to Splunk</P> Mon, 28 Oct 2019 18:03:35 GMT https://community.splunk.com/t5/Splunk-Search/How-to-apply-color-to-a-field-with-multiple-values-appended/m-p/466746#M131392 aberkow 2019-10-28T18:03:35Z