Dashboards & Visualizations

Column formating Splunk studio

Aresndiz
Explorer

Does anyone know if it is possible to create specific thresholds for each host in the dashboard studio table? I'm using a table where I focus on hard disk usage, previously I had no problems with the configuration since the threshold was 80% amber and 90% red. However, I was asked to adjust this threshold to 90 amber and 95 red only for a specific server. My question is, is it possible for the color format table to have different thresholds depending on the host?

Aresndiz_0-1738265447357.png

Aresndiz_1-1738265644751.png

 

 

Labels (1)
0 Karma
1 Solution

livehybrid
SplunkTrust
SplunkTrust

You can do this by overwriting some of the options within the table source:
Have a look at the following example:

Xnip2025-01-30_23-35-50.png

You can see that the colour is specified using SPL instead of logic within the Dashboard editor. Using a field prefixed with underscore _ will stop it showing in the table.
Then update the options for the table and add/edit the columnFormat:

        "columnFormat": {
            "<YourHighlightedField>": {
                "rowBackgroundColors": "> table | seriesByName('_colour')"
            }
        }

 

Xnip2025-01-30_23-36-34.png


I hope this helps!

View solution in original post

0 Karma

livehybrid
SplunkTrust
SplunkTrust

You can do this by overwriting some of the options within the table source:
Have a look at the following example:

Xnip2025-01-30_23-35-50.png

You can see that the colour is specified using SPL instead of logic within the Dashboard editor. Using a field prefixed with underscore _ will stop it showing in the table.
Then update the options for the table and add/edit the columnFormat:

        "columnFormat": {
            "<YourHighlightedField>": {
                "rowBackgroundColors": "> table | seriesByName('_colour')"
            }
        }

 

Xnip2025-01-30_23-36-34.png


I hope this helps!

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...