Display barchart of a dashboard with each bar in a different color based on the value

[saichandjawari]

I have a dashboard panel with a simple query, which gives top 20 values of the event. For example, I am searching for number of customers of top 20 countries of my product. As expected each country comes up with a unique value. Hence I need each cauntry should be given a unique color in the bar chart of a dashboard while each bar represents a unique country. Please suggest. Thanks!

[vnravikumar · Accepted solution]

Hi

Check this

<dashboard>
  <label>chart color</label>
  <row>
    <panel>
      <chart>
        <search>
          <query>index=_internal |top limit=5 sourcetype
          | transpose 0 header_field=sourcetype|search column=count</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="charting.chart">bar</option>
        <option name="charting.drilldown">none</option>
        <option name="charting.seriesColors">[0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440]</option>
        <option name="refresh.display">progressbar</option>
      </chart>
    </panel>
  </row>
</dashboard>

[saichandjawari]

vnravikumar, thanks! That worked for me. Can you please let me know the logic behind naming convention of colors?

[woodcock]

This answer allows you to pick the color pallet but Splunk assigns the colors as it chooses. If you need to map certain colors to certain values, then this is not the right way to do it; see my answer for the correct method.

[woodcock]

You need the charting.fieldColors setting:
https://docs.splunk.com/Documentation/Splunk/latest/Viz/ChartConfigurationReference