All Apps and Add-ons

Can you hard code a color for a value range in Calendar Heat Map?

phoenixdigital
Builder

Hi,

I've got an issue where I need to display multiple years for the Calendar Heat Map however it appears to have a limit of 12 months.

That is fine I can just have a panel for each year with this search

index=`my_index` sourcetype=bluecoat_importer_queue_status section=queue_status subsection=dump 
| dedup filename
| eval _time = date_timestamp
| eval start_of_year = strptime("2017-01-01","%Y-%m-%d")
| eval end_of_year = strptime("2018-01-01","%Y-%m-%d")
| where _time > start_of_year AND _time < end_of_year
| eval status = case (queue=="splunk_completed",100,queue_status=="pending",50,queue_status=="in_progress",50,queue_status=="processing",50,1==1,0)
| table _time filename queue queue_status status 
| timechart span=1d max(status) as status
| search status=*

Note how status gets set to 0, 50 or 100. Where I plan to have

  • 0 = red
  • 50 = orange or brown
  • 100 = green

Problem is the 2017 year doesn't have any results that contain 100 so the auto colour pickers picks a different set of colours. Note green for 2017 should be brown.

alt text

Is there any way for me to hardcode these colour ranges or values so I can keep consistency between years?

dijikul
Communicator

Any luck with this?

0 Karma

gmercier
Explorer

Still no one has answers for this ? I guess it's not in this viz's roadmap ?

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...