Dashboards & Visualizations

How to apply rangemap on two fields in the same panel?

New Member

Consider the table below as a dashboard, but instead of a number for fields predecessor and successor, I want to show some icons.
For this case, how can I use rangemap?

uniqueid    status     predecessor    successor 
24501      Success    24501       24504 
24502      Success    24502       24504 
24504      Success    24504       24505 
24505      Success    24505          24506  
24506      Fail    24506          24510 


Tags (3)
0 Karma


The field output by rangemap is called range. Do your first rangemap, then rename the field range to something more descriptive for your data. Now you are clear to use rangemap again with no field name collision.

Here is an example with the new Status Indicator viz:


Follow one of the Table Icon Set examples from the Dashboard Examples App available at https://splunkbase.splunk.com/app/1603/
Once installed, hit https://your_splunk:8000/en-US/app/simple_xml_examples/contents#Table_Elements

Esteemed Legend

Show us a mockup of your desired output for this dataset. I do not get it.

0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...

Security Newsletter Updates | March 2023

 March 2023 | Check out the latest and greatestUnify Your Security Operations with Splunk Mission Control The ...