Dashboards & Visualizations

How to highlight a table cell based on query?

ednk
Explorer

i have a table

case id severity open date status age
3241765 critical 6/5/2022 awaiting 30 days
9847636 high  1/6/2022 pending 5 days

 

i want to highlight the table by queries like those:

if severity=critical AND status=awaiting or pending - highlight the values critical and awaiting in red

if severity=critical AND status=awaiting or pending more than 30 days- highlight the row in red

if case is open more then 30 days - mark the cell in red.

Labels (4)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
0 Karma

ednk
Explorer

yes, 

 I didn't find a solution ,

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What did you try exactly?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

If you stopped by the Builder Bar at .conf26, thank you! This year, we brought ...

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...