I have some simple SPL that displays a single value and would like to change the color based on the field value.
index = windows* Status=OK source=computer| dedup source |table host Status
index=windows* Status=* source=computer
| dedup source
| table host Status
| eval color=case(Status=="OK","green",Status=="Error","red")
| eval type="desktop"
| rename host as from
| fields from, type, color
hi, Network Diagram Viz is interesting.
I used it for the first time.
How about this search with Network Diagram Viz?
View solution in original post