How can I get Not equal in format block?

[paddy]

I have a simple dashboard reporting on file transfers.  There is one column I want color coded based on return code.  Ideally I could have either return code = "0" is green, return code != "0" is red

What I currently have covers the "0" just fine, but doesn't cover non"0" results.

<format type="color" field="PPA1ReturnCode">
<colorPalette type="map">{"0":#65A637,"!=0":#D93F3C,"Failure":#D93F3C}</colorPalette>
</format>

I also tried "NOT 0", and that didn't work either.

[ITWhisperer]

Can you use

<colorPalette type="expression">

Table column Simple XML - Splunk Documentation