topic Re: change color of column chart for each type? in Splunk Search

change color of column chart for each type?

vrmandadi — Thu, 10 Mar 2016 21:31:05 GMT

Hello all ,

I ran the below query

....| chart count by SRC_ID

which gives me the count for each SRC_ID . when the visualized it in a column chart each id should have a different color

example

: SRC_ID COUNT

G 40
N 20

each id should have a color.I tried using the below XML but it did not change
option name="charting.fieldColors">{"G":0xFF0000,"N":0x6699FF}`

Re: change color of column chart for each type?

menonmanish — Thu, 10 Mar 2016 21:36:44 GMT

You will get different colors for each SRC_ID for a different visualization like PIE. Why are you expecting column chart to have different colors..its not a normal behavior? Is that a requirement?

Re: change color of column chart for each type?

vrmandadi — Thu, 10 Mar 2016 21:38:13 GMT

ya that is why i am trying to figure out can it be done or not

Re: change color of column chart for each type?

somesoni2 — Thu, 10 Mar 2016 21:51:25 GMT

Try something like this

your base search | eval temp=1 | chart count over by SRC_ID limit=0 | rename temp as SRC_ID

The color code is assigned based of different series, your original search just have one series count. Above search will give series for each SRC_ID value so each will have different color

*Update *
To retain the x-axis labels, try this

your base search | chart count by SRC_ID | eval series=SRC_ID | chart values(count) over SRC_ID by series limit=0

Re: change color of column chart for each type?

vrmandadi — Thu, 10 Mar 2016 22:03:05 GMT

well the color is changing but it messed up with the SRC_ID ,it is not showing the name of each id in the x-axis and its showing both ids count when hover on the bar

Re: change color of column chart for each type?

vrmandadi — Tue, 29 Sep 2020 09:04:57 GMT

I tried the updated query

| chart count by SRC_ID | eval series=SRC_ID | chart values(count) over SRC_ID by series limit=0

the output is

SRC_ID G N U

G 40
N 20

U 10

Re: change color of column chart for each type?

vrmandadi — Thu, 10 Mar 2016 23:05:58 GMT

I have attached a screen shot to the question

Re: change color of column chart for each type?

chimell — Fri, 11 Mar 2016 09:44:00 GMT

Hi
Test the following xml code

<dashboard>
  <label>my_title</label>
  <row>
   <panel>
<chart>
<title>Field colors example</title>
<search>
<query>
................................................ | chart count(eval(SRC_ID="G")) as ER   count(eval(SRC_ID="N")) as WA    count(eval(SRC_ID="U")) as INF  by  SRC_ID
</query>
<earliest>-7d@h</earliest>
<latest>now</latest>
</search>
<option name="charting.axisY.scale">log</option>
<option name="charting.chart">column</option>
<option name="charting.fieldColors">
{"G": 0xFF0000, "N": 0xFF9900,"U": 0xFFAAF0}
</option>
<option name="charting.legend.placement">right</option>
</chart>
</panel>
  </row>
</dashboard>