Hello Splunkers, I am trying to color code cells based on the values of field 'execution_status'. Builds columns are dynamics, and not fixed, overtime more builds will appear. How do i dynamically color code the cell with 'FAIL', 'PASS', 'ERROR'.
<row>
<panel>
<title>Results by Builds</title>
<table>
<search>
<query>index=* source IN (*)
| stats values(execution_status) as execution_status by test_case, build
| streamstats first(execution_status) as execution_status by test_case, build
| chart values(execution_status) by test_case, build</query>
<earliest>$time.earliest$</earliest>
<latest>$time.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">5</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
</row>
| test case | build1 | build2 | build3 | build4 |
| test1 | PASS | FAIL | ERROR | PASS |
| test2 | ERROR | FAIL | PASS | FAIL |
| test3 | PASS | ERROR | PASS | PASS |
| test4 | FAIL | ERROR | PASS | ERROR |
| test5 | ERROR | ERRO | FAIL | PASS |
| test6 | PASS | ERRO | PASS | PASS |
Define the default field colours using the map format definition
<format type="color">
<colorPalette type="map">{"ERROR":#FF0000, "PASS":#00FF00, "FAIL":#0000FF}</colorPalette>
</format>