<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to get rangemap to change the color of bars based on evaluated heap percentage used? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-get-rangemap-to-change-the-color-of-bars-based-on/m-p/206288#M60032</link>
    <description>&lt;P&gt;how do I change the colors of my bar chart to red, yellow, and green?  Here is my query:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=xyxy env=PROD profile=blah heap_used=* total_heap_size=* | stats last(heap_used) AS heap_used, last(total_heap_size) AS total_avail by host | convert num(heap_used), num(total_avail) | eval heap_perc = tostring(round((heap_used/total_avail)*100,2)) + "%" | convert num(heap_perc) | table host heap_perc | rangemap field=heap_perc green=0-45 yellow=45-60 red=60-100
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;My XML for the chart:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;("red":0xFF0000,"yellow":0xFFFF00,"green":0x00FF00)
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Thu, 04 Aug 2016 20:55:19 GMT</pubDate>
    <dc:creator>iatwal</dc:creator>
    <dc:date>2016-08-04T20:55:19Z</dc:date>
    <item>
      <title>How to get rangemap to change the color of bars based on evaluated heap percentage used?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-get-rangemap-to-change-the-color-of-bars-based-on/m-p/206288#M60032</link>
      <description>&lt;P&gt;how do I change the colors of my bar chart to red, yellow, and green?  Here is my query:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=xyxy env=PROD profile=blah heap_used=* total_heap_size=* | stats last(heap_used) AS heap_used, last(total_heap_size) AS total_avail by host | convert num(heap_used), num(total_avail) | eval heap_perc = tostring(round((heap_used/total_avail)*100,2)) + "%" | convert num(heap_perc) | table host heap_perc | rangemap field=heap_perc green=0-45 yellow=45-60 red=60-100
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;My XML for the chart:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;("red":0xFF0000,"yellow":0xFFFF00,"green":0x00FF00)
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 04 Aug 2016 20:55:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-get-rangemap-to-change-the-color-of-bars-based-on/m-p/206288#M60032</guid>
      <dc:creator>iatwal</dc:creator>
      <dc:date>2016-08-04T20:55:19Z</dc:date>
    </item>
    <item>
      <title>Re: How to get rangemap to change the color of bars based on evaluated heap percentage used?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-get-rangemap-to-change-the-color-of-bars-based-on/m-p/206289#M60033</link>
      <description>&lt;P&gt;Use this query&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=xyxy env=PROD profile=blah heap_used=* total_heap_size=* | stats last(heap_used) AS heap_used, last(total_heap_size) AS total_avail by host | convert num(heap_used), num(total_avail) | eval heap_perc = tostring(round((heap_used/total_avail)*100,2)) + "%" | convert num(heap_perc) | table host heap_perc | eval green=if(heap_perc&amp;gt;0 AND heap_perc&amp;lt;=45,heap_perc,0) | eval yellow=if(heap_perc&amp;gt;45 AND heap_perc&amp;lt;=60,heap_perc,0) | eval red=if(heap_perc&amp;gt;60 AND heap_perc&amp;lt;=100,heap_perc,0) | table host green yellow red
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 04 Aug 2016 21:12:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-get-rangemap-to-change-the-color-of-bars-based-on/m-p/206289#M60033</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2016-08-04T21:12:14Z</dc:date>
    </item>
  </channel>
</rss>

