Dashboards & Visualizations

Cannot view Splunk dashboard from Distance

vkotagiri
New Member

Hi Splunk Support,

We Cofigured splunk dashboards on Monitors in our Cabin and will view it from our desk.. We cannot see the count from quite distance. is there any such color coding for Failures if they reach particular count so that we can alert once we see the color on the dashboard.?

Tags (1)
0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Sure! You will need to use Single Values and a rangemap command. The full explanation is here http://docs.splunk.com/Documentation/Splunk/6.0/Viz/PanelreferenceforSimplifiedXML#single.

The rangemap command will tell the dashboard to color it Green, Yellow, or Red depending on the value of a calculated field.

Here is a sample:

<single>
<searchString>
YOUR_SEARCH | stats count as log_events
| rangemap field=log_events low=1-100 elevated=101-300 default=severe
</searchString>
<title>Log events</title>
<earliestTime>-1d</earliestTime>
<latestTime>now</latestTime>
<option name="classField">range</option>
<option name="afterLabel">total logging events</option>
<option name="beforeLabel">Found</option>
</single>

0 Karma

ChrisG
Splunk Employee
Splunk Employee

classField should be range, as the example states. We did test this docs example before we published it.

0 Karma

sowings
Splunk Employee
Splunk Employee

I think it should be "range" (as that's what gets populated by rangemap).

0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

If that is not correct, we need to ping the docs team, I pulled from the link for easy ref.

0 Karma

sowings
Splunk Employee
Splunk Employee

classField correct?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...