<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Chart Background or Text Color in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Chart-Background-or-Text-Color/m-p/158842#M44779</link>
    <description>&lt;P&gt;I have a chart displaying in dashboard panel. When a value is 0 I'd like to call it out by makeing the text or background of the cell a different color. Is this possible? &lt;/P&gt;

&lt;P&gt;I have a chart coded like this:&lt;BR /&gt;
    ... | chart count over source by Date&lt;/P&gt;

&lt;P&gt;I've been playing with rangemap but it doesn't seem to be working:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=charlesriver | bucket span=1d _time | stats count first(_time) as Date by _time, source | eval Date=strftime(Date,"%m/%d/%Y %A")  | eval source=replace(source,"/apps/wcm-splunk/work/crd/prod/","")  | eval source=substr(source,1,len(source)-13)  | table Date, source, count | chart count over source by Date | sort Date | rangemap field=count red=0-0 
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Wed, 27 Nov 2013 19:01:02 GMT</pubDate>
    <dc:creator>andrewkenth</dc:creator>
    <dc:date>2013-11-27T19:01:02Z</dc:date>
    <item>
      <title>Chart Background or Text Color</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Chart-Background-or-Text-Color/m-p/158842#M44779</link>
      <description>&lt;P&gt;I have a chart displaying in dashboard panel. When a value is 0 I'd like to call it out by makeing the text or background of the cell a different color. Is this possible? &lt;/P&gt;

&lt;P&gt;I have a chart coded like this:&lt;BR /&gt;
    ... | chart count over source by Date&lt;/P&gt;

&lt;P&gt;I've been playing with rangemap but it doesn't seem to be working:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=charlesriver | bucket span=1d _time | stats count first(_time) as Date by _time, source | eval Date=strftime(Date,"%m/%d/%Y %A")  | eval source=replace(source,"/apps/wcm-splunk/work/crd/prod/","")  | eval source=substr(source,1,len(source)-13)  | table Date, source, count | chart count over source by Date | sort Date | rangemap field=count red=0-0 
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Wed, 27 Nov 2013 19:01:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Chart-Background-or-Text-Color/m-p/158842#M44779</guid>
      <dc:creator>andrewkenth</dc:creator>
      <dc:date>2013-11-27T19:01:02Z</dc:date>
    </item>
    <item>
      <title>Re: Chart Background or Text Color</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Chart-Background-or-Text-Color/m-p/158843#M44780</link>
      <description>&lt;P&gt;Hallo,&lt;BR /&gt;
If you are using splunk 6 or more you can use this command: | rangemap field=count severe=0-0 because by default option severe is customized in the share css files and the test color is red: &lt;BR /&gt;
&lt;A href="http://Splunk_homesharesplunksearch_mrsparkleexposedcssbootstrap.min.css" target="_blank"&gt;Splunk_home\share\splunk\search_mrsparkle\exposed\css\bootstrap.min.css&lt;/A&gt;&lt;BR /&gt;
You can have also  elevated for color yellow … &lt;BR /&gt;
Note that you can use this for  stats command. For chart command I thing that you need to use Javascript for your dashboard. For more information read splunk Visualization manuel.&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 18:21:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Chart-Background-or-Text-Color/m-p/158843#M44780</guid>
      <dc:creator>Patient</dc:creator>
      <dc:date>2020-09-28T18:21:35Z</dc:date>
    </item>
  </channel>
</rss>

