Network Diagram Viz: change single value color (Green/Red) by status (OK/Error)

[nathanluke86]

I have some simple SPL that displays a single value and would like to change the color based on the field value.

index = windows* Status=OK source=computer| dedup source |table host Status

Thanks,

[to4kawa · Accepted solution]

index=windows* Status=* source=computer
| dedup source 
| table host Status
| eval color=case(Status=="OK","green",Status=="Error","red")
| eval type="desktop"
| rename host as from
| fields from, type, color

hi, Network Diagram Viz is interesting.
I used it for the first time.
How about this search with Network Diagram Viz?