All Apps and Add-ons

Customize icon in Status Indicator from Awesome font icons library ?

pgadhari
Builder

I want to use "snowflake" icon in the status indicator visualization for my panel. I tried using the xml option for that, but the icon is not showing up. I referred below documentation to use the xml option :

https://docs.splunk.com/Documentation/StatusIndicator/1.3.0/StatusIndicatorViz/StatusIndicatorXML

<option name="status_indicator_app.status_indicator.fixIcon">snowflake</option>

for fixIcon option, accepted values says that "any fontAwesome icon name" can be used from fontawesome library. But when I specify that icon in xml option, it is not working. Link for the icon is - https://fontawesome.com/icons?d=gallery&q=snowflake

Please help me how to resolve this issue, if anybody has done it ?

Thanks
PG

0 Karma
1 Solution

niketn
Legend

@pgadhari Status Indicator Custom Visualization is built on top of version 4.5.0 which does not have the icon you are looking for.

As an alternate you can try out the unicode character: https://emojipedia.org/snowflake/
You can put this in front of your data so that it shows up in Status Indicator as static icon.

Following is an old answer with this approach on table, but you can try with Status Indicator as well: https://answers.splunk.com/answers/687734/how-do-you-add-buttons-on-table-view.html

| makeresults 
| fields - _time 
| eval data=random() 
| eval data="❄️ ".data 

Another alternate would be to use the Scalable Vector Graphincs app and build out Snowflake directly through SPL in the visualization alongside your data.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

@pgadhari Status Indicator Custom Visualization is built on top of version 4.5.0 which does not have the icon you are looking for.

As an alternate you can try out the unicode character: https://emojipedia.org/snowflake/
You can put this in front of your data so that it shows up in Status Indicator as static icon.

Following is an old answer with this approach on table, but you can try with Status Indicator as well: https://answers.splunk.com/answers/687734/how-do-you-add-buttons-on-table-view.html

| makeresults 
| fields - _time 
| eval data=random() 
| eval data="❄️ ".data 

Another alternate would be to use the Scalable Vector Graphincs app and build out Snowflake directly through SPL in the visualization alongside your data.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

pgadhari
Builder

Thanks @niketnilay. I will try this out and revert.

0 Karma

pgadhari
Builder

This works great. Thanks @niketnilay. Answer accepted.

0 Karma

pgadhari
Builder

can someone reply on this please ?

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...