All Apps and Add-ons

Timeline custom visualization - Min/max colors settings don't impact categorical display mode colors.

AlexGaz
Explorer

Hi,

I don't manage to open a support case so I'm writing here: I'm using Timeline custom visualization (Splunk 6.6.2) and I'm seeing that colors range for categorical display mode seem to be fixed, regardless min/max colors you've set.

Sequential display mode correctly reflect colors you set instead.

Do you have same problem?

Many thanks and regards,
Alessandro.

0 Karma
1 Solution

niketn
Legend

@AlexGaz, it is expected for the Categorical Colors to pick default series colors defined in Splunk. They are not dependent on Min/Max color because they are not sequential.

If you want to override default Series Colors assigned via Categorical Colors, you might have to do the same using CSS. If your Series name is fieldName1, you will have to override following CSS

.cccat-fieldName1 {
   fill: red !important;
   srtoke: red !important;
}

Please try out and let us know. I had answered a question on similar lines last month, however, I am unable to find the same.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

niketn
Legend

@AlexGaz, it is expected for the Categorical Colors to pick default series colors defined in Splunk. They are not dependent on Min/Max color because they are not sequential.

If you want to override default Series Colors assigned via Categorical Colors, you might have to do the same using CSS. If your Series name is fieldName1, you will have to override following CSS

.cccat-fieldName1 {
   fill: red !important;
   srtoke: red !important;
}

Please try out and let us know. I had answered a question on similar lines last month, however, I am unable to find the same.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

AlexGaz
Explorer

Hi niketnilay,

ok, I didn't know they were linked to default Splunk colors: yes, it works (just changing "cccat" and "srtoke" into "ccat" and "stroke" :)).

Thank you!

niketn
Legend

@AlexGaz, Glad to know it worked. I have converted to Answer. Please accept to mark as answered!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

AlexGaz
Explorer

Of course!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...