I have a table within a dashboard that is displaying information comparing event counts from a customer site to the event counts back here at corporate. The goal is to easily identify if corporate is missing any event data from the customer site. Here is a screenshot of the table:
I want to highlight any cells where "Missing=Yes" so it visually pops out to anyone viewing the dashboard. I found this post How-do-you-change-the-cell-color-based-on-partial-value but that solution is for columns whose name remain the same. In my table, the column names will change each day as the column names are the dates being displayed.
Is there a way to color a cell based on a condition when the column names are dynamic?
I also want to offer up that I am a beginner in Splunk and have no experience with using JavaScript or anything else besides Simple XML.
Thanks in advance for any suggestions.
If you don't specify a field name, it applies to the whole table, so try:
<format type="color">
<colorPalette type="expression">if(match(value,"Missing=Yes"),"#53A051",null)</colorPalette>
</format>
If you don't specify a field name, it applies to the whole table, so try:
<format type="color">
<colorPalette type="expression">if(match(value,"Missing=Yes"),"#53A051",null)</colorPalette>
</format>
Wow! That was so much easier than I thought! Thanks kind stranger.