use the heat map option and highlight the max and min per each column.

HattrickNZ — Tue, 07 Apr 2020 02:22:37 GMT

hi there

THis is my sample data. I want to use the heat map option and highlight the max and min per each column.
So I would have 2 values highlighted in each column, the max and the min.
Can this be done in Splunk 7.3.1?

| makeresults 
      | eval data = "
 1    10;
 2    9;
 3    8;
 4    7;
 5    6;
 6    5;
 7    4;
 8    3;
 9    2;
 10   1;
     " 
      | makemv delim=";" data
      | mvexpand data
      | rex field=data "(?<Date>\d+)\s+(?<Y>\d+)"
      | fields + Date Y | fields - _time
      |search Y = * | 
      chart count(Y) by Y | sort + Y

this is what I get just using the default setting.

Re: use the heat map option and highlight the max and min per each column.

niketn — Tue, 07 Apr 2020 19:25:19 GMT

@HattrickNZ I have posted an answer to @somesoni2 's question posted above. https://answers.splunk.com/answers/116018/splunk-6-simple-xml-dataoverlaymode-on-table-can-we-specify-which-column-to-show-heatmap-on.html?childToView=815297#answer-815297

Please refer to one of my older answer on similar lines which also explains both approaches: https://answers.splunk.com/answers/686288/how-do-you-highlight-a-table-cell-based-on-a-field.html

Do upvote the other answers if you find them useful!

topic Re: use the heat map option and highlight the max and min per each column. in Splunk Search

use the heat map option and highlight the max and min per each column.

Re: use the heat map option and highlight the max and min per each column.