Dashboards & Visualizations

How do I create Punchcard that sorts bins with color?

splunkman
Engager

Im trying to make a punchcard to visualize incoming issues per hour in the prvious week.
This is the result i get with the following code: 

 

 

 

| eval issues="Issue Priority"
| stats count(issues) by date_hour date_wday

 

 

 

splunk1.png
splunk2.png

I really want to get more bins like on the right side so that i can assign values with color. E.g. 0<10 = green, 11<70 = yellow, 71<150=red. 

Something i need to include?

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

I haven't used that viz before but it looks like (from the documentation) that you just need to eval another field

| eval issues="Issue Priority"
| stats count(issues) as count by date_hour date_wday
| eval range=case(count < 11, "Green", count < 70, "Yellow", count < 150, "Red")

View solution in original post

splunkman
Engager

Thank you!
It worked with the Categorical color mode.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

I haven't used that viz before but it looks like (from the documentation) that you just need to eval another field

| eval issues="Issue Priority"
| stats count(issues) as count by date_hour date_wday
| eval range=case(count < 11, "Green", count < 70, "Yellow", count < 150, "Red")
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...