Dashboards & Visualizations

How to change the default colors of 9.X back to 8.X. (9 is very bright)?

robertlynch2020
Influencer

Hi

We are about to upgrade to version 9.0.4 but we have noticed that version 9 colors are very bright.

Is there a way to use the 8. X colors. As we have many panels and all our end users are giving out that it is extremely bright and over time. I know I can change each panel, but we have so many at this stage, I am looking for a way to do it on the system level, please.

9.0.4 0 The colors look like this

robertlynch2020_0-1677596275806.png

The 8.1.0 is not so bright.

robertlynch2020_1-1677596550329.png

Any help would be great

Rob

 

 

Labels (1)

robertlynch2020
Influencer

Thanks for this - i will try it out - cheers

0 Karma

patng_nw
Communicator

I have the same question.  The new color scheme is not easy on the eyes of our users.

0 Karma

tbaublys_splunk
Splunk Employee
Splunk Employee

There are two possible solutions: 
1) You can assign colours explicitly and case by case in the chart or table options, for example:

 

<option name="charting.fieldColors">{"COMPLETE":#358856,"CANCELED":#ED8440,"FAILED":#B90E0A,"PENDING":#7EA77B }</option>

 

for tables you could use 

 

<colorPalette type="map">{"ACCESSORIES":#6DB7C6,"ARCADE":#F7BC38,"STRATEGY":#AFEEEE}</colorPalette>

 

 

 


2) If you are admin, you could create your own ui-prefs.conf in $SPLUNK_HOME/etc/system/local with following content and restart Splunk  

 

[default]
display.visualizations.charting.seriesColors = [0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440, 0x3863a0, 0xa2cc3e, 0xcc5068, 0x73427f, 0x11a88b, 0xea9600, 0x0e776d, 0xffb380, 0xaa3977, 0x91af27, 0x4453aa, 0x99712b, 0x553577, 0x97bc71, 0xd35c2d, 0x314d5b, 0x99962b, 0x844539, 0x00b290, 0xe2c188, 0xa34a41, 0x44416d, 0xe29847, 0x8c8910, 0x0b416d, 0x774772, 0x3d9988, 0xbdbd5e, 0x5f7396, 0x844539]

 

This would change default colours back to the old defaults of 8.x - but  it only applies to the newly created charts using default colour scheme. It would also affect all users on the Search Head and require restart, so please test it before and use with caution. 

robertlynch2020
Influencer

HI

After trying this is does not work sorry - any other ideas?

 

Thanks

Robert

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...