Dashboards & Visualizations

Bar Chart Splunk6

xisura
Communicator

Hi!

Is there a way in splunk 6 to change the color of the bar graph based on the search result like in rangemap??

Thanks in Advanced!
Jarize

Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

You can do something like this:

some search | timechart avg(some_value) as avg | eval green = case(avg < 50, avg) | eval yellow = case(avg < 80, avg) | eval red = case(avg >= 80, avg) | fields - avg

Display the resulting chart as a stacked column chart, and set the colors to green, yellow and red.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

You can do something like this:

some search | timechart avg(some_value) as avg | eval green = case(avg < 50, avg) | eval yellow = case(avg < 80, avg) | eval red = case(avg >= 80, avg) | fields - avg

Display the resulting chart as a stacked column chart, and set the colors to green, yellow and red.

Get Updates on the Splunk Community!

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...

Stay Connected: Your Guide to February Tech Talks, Office Hours, and Webinars!

&#x1f48c;Keep the new year’s momentum going with our February lineup of Community Office Hours, Tech Talks, ...