Dashboards & Visualizations

How to make Status Indicator visualization display server name and change color based on count?

Ashwini008
Builder

Hi,

Ashwini008_0-1672068190943.png

In place of count I want to show the server name, And change color based on condition if count is >250.

I referred many links and docs but could not achieve what I wanted 

index = webss
sourcetype = webphesst earliest= -1d latest=now
| where HTTP=500
| stats count by host
| eval color=if(count>=250, "#dc4e41", "#65a637"), icon=if(count>=250, "times-circle", "check-circle")
Labels (2)
0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...