How to achieve color with negative values and positive values in dashboard studio?

[anissabnk]

Hello everyone, 

I have a question with dashboard studio, in JSON format.

I made this dashboard and I want a specific color for the "diff" field. 

When diff is <0 : red color

when diff is > 0 : green color 

My spl request is :

`easyVista` source="incidents_jour"
| dedup "N° d'Incident"
|rename "Statut de l'incident" as statut
|eval STATUT=case( match(statut,"Résolu"),"fermé",
match(statut,"Clôturé"),"fermé",
match(statut,"Annulé"),"fermé",
match(statut,"Archivé"),"fermé",
match(statut,"A prendre en compte"),"ouvert",
match(statut,"Suspendu"),"ouvert",
match(statut,"En cours"),"ouvert",
match(statut,"Escaladé"),"ouvert")
|timechart count by STATUT usenull=f | eval diff=fermé-ouvert

Can you help me please ?

Thanks

[fredclown]

Unfortunately, I don't see anything in the definition for column charts that allows you to dynamically change the color. You can set static colors in the source editor with this syntax ...

"my_chart": {
	"type": "splunk.column",
	"dataSources": {
		"primary": "my_ds"
	},
	"options": {
		"seriesColorsByField": {
			"diff": "#FF0000",
			"fermé": "#00FF00",
			"ouvert": "#0000FF"
		}
	}
}

[anissabnk]

Yes, that is the probleme. I want that the value change dynamically. 

I didn't find something to do this.

[fredclown]

Yeah, unfortunately without getting into scripting it doesn't look like you can dynamically change the colors via configuration.