Are there Different Dashboard Colors since Update to 9.0.2?

[blablabla]

Hello all, 

since our Update to Splunk Enterprise 9.0.2 we experienced, that the Dashboard colors (Simple XML) changed completely. And the new colors are terrible! Did someone experience something similar after the update? And if yes: Were you able to get the colors back to the way they were?

On 8.2.2.3

On 9.0.2

I would appreciate every hint. The new colors are something that cannot be presented to management 🙈

Thanks and best Regards

[SplunkingKnight]

Hello,

we have the same problem after updating to version 9.0.2. Has anyone already found a way to turn the dashboard color scheme back to the previous state?

Best regards

[blablabla]

Hi @SplunkingKnight 

up to now the only solution seems to be overwriting the colors according to this post.

As far as I understood, the reason for the new colors is to meet the minimum requirement for regulations for visually impaired people (A11y_WCAG). 

But yeah, would have been nice, if the new colors would have been a configurable option that users, who are visually impaired, could select. 🤔

Best regards

[SplunkingKnight]

Hi @blablabla,

thanks for your feedback. Overwriting the default colors using the seriesColors parameter works in principle, but I have not been able to find a color scheme that looks at least reasonably good.

Do you or anyone else have the hexcodes of the old color scheme from the 8.x version of Splunk?

Best regards

[diogofgm]

The following docs page has a list of the default hex codes for charts, although I believe that they are not update, at least not in the v9.x docs.

https://docs.splunk.com/Documentation/Splunk/8.2.2/Viz/ChartConfigurationReference

*Default value for charting.seriesColors:

[0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440, 0x3863a0, 0xa2cc3e, 0xcc5068, 0x73427f, 0x11a88b, 0xea9600, 0x0e776d, 0xffb380, 0xaa3977, 0x91af27, 0x4453aa, 0x99712b, 0x553577, 0x97bc71, 0xd35c2d, 0x314d5b, 0x99962b, 0x844539, 0x00b290, 0xe2c188, 0xa34a41, 0x44416d, 0xe29847, 0x8c8910, 0x0b416d, 0x774772, 0x3d9988, 0xbdbd5e, 0x5f7396, 0x844539]

[blablabla]

Thanks for posting. At least for me this series did not yield the colours like before. I think the order is maybe not right 🤔

[blablabla]

Hi @SplunkingKnight 

I used this color scheme

<option name="charting.seriesColors">[0x06D9C,0x4FA484,0xF59E63,0xB4595C,0x62B3B2,0x284B6A]</option>

I am not sure though, what is the behavour, if your plot would need more colors than defined.

Best regards

[SplunkingKnight]

Hi @blablabla, @diogofgm,

thank you for the color series. With both of them the dashboards look much better than with the new default settings of Splunk.

Unfortunately, I have not yet managed to globally enable these color series via the display.visualizations.charting.seriesColors setting in ui-prefs.conf. The setting does not work and a btool check throws the following error message:

Invalid key in stanza [default] in /opt/splunk/etc/system/local/ui-prefs.conf, line 18: display.visualizations.charting.seriesColors (value: [0x006d9c,0x4fa484,0xf59e63,0xb4595c,0x62b3b2,0x284b6a]).

Have you managed to set this setting globally?

Btw. there is even an official support knowledge base article about this topic -> https://splunk.my.site.com/customer/s/article/Changing-the-color-schema-across-dashboards-and-visual...

Best regards