Dashboard Custom Decorations using rangemap with mulitple queries

[_jimmybrown]

I am creating a dashboard in which I want to use the Custom Decorations css file from the Dashboards Examples app. While I understand the basic context of what is happening from the examples app; I would like to use decorations based upon a couple of queries being true and not just one.

My dashboard is the parent dashboard to other dashboards containing more details. I would like to have the main dashboard display one of the custom decorations based upon multiple search criteria from the child dashboards. Essentially, wanting the main dashboard to show urgent issues.

How would I go about using SPL and the css file to say if the results from search 1 are in this range and if the results from search 2 are in this range then they equal a severe decoration?

Thanks.

Jimmy Brown (new to Splunk)

[_jimmybrown · Accepted solution]

The way I resolved the issue was use an eval case statement and then using rangemap based upon the results of the case statement.

[_jimmybrown]

After much perseverance I was able to solve my own issue.

The way I resolved the issue was use an eval case statement and then using rangemap based upon the results of the case statement.