All Apps and Add-ons

Status Indicator - Custom Visualization: Why is "Icon Only" view not working as expected?

Communicator

I have the following search I am using to create some status indicator visualizations:

... | rangemap field=delta #ff0000=-1000-0 #008000=0-10000 default=#ff0000 | rename range as range_color | eval icon="check-circle" | table delta icon range_color

This works as expected if I use "Show Value and Icon":
alt text

If I use "Show Icon Only", i get the following error:

Error rendering Status Indicator visualization: The specified icon does not exist. Check the font awesome website to find a valid icon. Examples: arrow-circle-left, bullseye, mobile
0 Karma
1 Solution

Ultra Champion

try:

basesearch | table  icon range_color delta

I found this too - the order of the fields is relevent when not using both the value and the icon, yet it still insists on providing all 3 fields.

View solution in original post

Splunk Employee
Splunk Employee

@david.rose - Did the answer provided by nickhillscpl help provide a working solution to your question? If yes, please don't forget to resolve this post by clicking "Accept". If no, please leave a comment with more feedback. Thanks!

0 Karma

Ultra Champion

try:

basesearch | table  icon range_color delta

I found this too - the order of the fields is relevent when not using both the value and the icon, yet it still insists on providing all 3 fields.

View solution in original post

New Member

Thanks nickhillscpl. "Order" does matter! In my case, I have to put the ragemap field to the middle. Never thought of that!

0 Karma

Esteemed Legend

So did this fix it for you? If so, please do click Accept to close the question and help others.

0 Karma

New Member

I encounter the exact same problem. But if picked icon "Static icon", it worked. Not working when choosing "Field value". Anyone has any thoughts?

0 Karma