Dashboards & Visualizations

How to make ranges (from predict command) initially highlighted? (a.k.a. gain focus upon loading)

kaylahood
Engager

Timechart with predictions shown in desaturated colors
Timechart with predictions shown in normally saturated colors

I have created a timechart visualization using a single predict command and several eval commands to produce several faux predict-style ranges.
I'll briefly describe my technique so that those who are unfamiliar can understand what I'm doing (it's a bit hackish).

First, I have at least three fields which represent some set of values over time. These three fields should represent a "lower" range boundary (let's call this lower), some value for the "middle" of the range ( middle ), and a value for the "upper" range boundary ( upper ), though the visualization will still produce... something... if the values are not correctly oriented (this, I'm pretty sure, would be an unintended use case).

You'll use evalto trick Splunk's timechart visualization module into believing your three fields are the result of a predict command.
eval _lower=lower, _predicted=middle, _upper=upper

If you want to make more than one of these, you can add numbers to the end of each internal field name (starting with 2).
eval _lower2=lower2, _predicted2=middle2, _upper=upper2 (assuming you have three fields lower2, middle2, and upper2)

Now, my question is:
How can I force my timecharts to never show "dull" or "unsaturated" colors for my predicted ranges? The first picture above shows my timechart when it first loads. The second shows it after I've hovered my mouse over any of the ranges on the timechart and then moved my mouse away.

I want the colors to start out vibrant and stay that way. Is there anything I can do, other than make some CSS hacks to target the visualization, to make the colors show up how I want them?

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...