Dashboards & Visualizations

Event type colors not shown in Dashboards

cemiam
Path Finder

I have created an event type and set a color for it. Events colored in search app and reports however they are not shown in the Dashboards. I have save it as both Inline Search and Report however issue is still the same. Do you have any suggestion to colorized Dashboard Panels?

Best Regards,
Cem

Tags (1)
0 Karma
1 Solution

cmerriman
Super Champion

add |fields eventtype to the end your search in the dashboard

View solution in original post

cmerriman
Super Champion

add |fields eventtype to the end your search in the dashboard

cemiam
Path Finder

Hi,

Soon I can see the colored events 🙂 Thanks for your assitance.

All the best,
Cem

0 Karma

cemiam
Path Finder

I am trying coloring dashboards panel using eventtypes like in the article below.

http://docs.splunk.com/Documentation/Splunk/6.5.1/Knowledge/Defineeventtypes

I have added the screenshots. As you can see events are colored in the search app and reports. However it is not worked with Dashboard Panels.

Dashboard: http://imgur.com/a/iJuCS
Report: http://imgur.com/a/Q2jKa
Search Events: http://imgur.com/a/osQSV

Best Regards,
Cem

0 Karma

cmerriman
Super Champion

can you share some syntax of what you're displaying in the dashboard? coloring eventtypes i believe only shows when viewing raw events. If you just want to highlight certain text, in 6.5, you can use table formatting to highlight values.

http://docs.splunk.com/Documentation/Splunk/6.5.1/Knowledge/Defineeventtypes
http://docs.splunk.com/Documentation/Splunk/6.5.1/Viz/TableFormatsFormatting#Column_color

0 Karma

cemiam
Path Finder

I am trying coloring dashboards panel using eventtypes like in the article below.

http://docs.splunk.com/Documentation/Splunk/6.5.1/Knowledge/Defineeventtypes

I have added the screenshots. As you can see events are colored in the search app and reports. However it is not worked with Dashboard Panels.

Dashboard: http://imgur.com/a/iJuCS
Report: http://imgur.com/a/Q2jKa
Search Events: http://imgur.com/a/osQSV

Best Regards,
Cem

0 Karma

maffreitas
Path Finder

Let me know if you talking about this:

http://docs.splunk.com/Documentation/Splunk/6.5.2/Viz/BuildandeditdashboardswithSimplifiedXML#Specif...

If not, please share with us more details or some code/images.

Regards.

0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...