Heatmap-style overlay at row level

[southeringtonp]

Is there a way to highlight an entire row in a SimpleResultsTable based on the value of a single cell in that row?

Or to highlight one field in the row based on the value of another field?

I'm looking for something like the typical cell-based heatmap, but applied to the entire event, e.g., to highlight high-severity events.

[rsennett_splunk]

Still no "one click " way to accomplish this but I believe you can accomplish what you're looking for using css and javascript.

Start by looking at the answer here and follow the trail. You'll find examples of using css and javascript as well as a reference to an app that provides examples of how you might implement it (the app is for rowcolors).

[araitz]

See here for a start:

http://splunk-base.splunk.com/answers/13012/does-42-have-any-capabilities-to-set-a-row-color-based-o...

[RicoSuave]

I had the same problem, so instead of relying on a SimpleResultsTable, i used the SingleValue module + the stats count command with a rangemap applied to it.

[southeringtonp]

What I had in mind was more for comparison against an absolute, pre-defined threshold, but even using the existing heatmap functionality would be a plus.

[gkanapathy]

e.g., if I have columns in a single table that are of widely vary magnitude across columns (but not within a column), the heatmap is much less useful.

[gkanapathy]

Yeah, I would like to see an option to have heatmap colors relative to the values present in a single column, rather than over all numeric values in a table.