Dashboards & Visualizations

How to set color code result based on uniqueness

balash1979
Path Finder

I am running a query and it provides me the following result (as an example)

ENV VALUE
env1 1234
env2 2345
env3 1234
env4 2345

Is there a way I can color code the lines that are same, meaning, i would like in my panel to show a color for the lines
env1 1234
env3 1234

and some other color for lines
env2 2345
env4 2345

Basically, I am trying to do a color coding scheme so in my dashboard if my panel has different colors its an alarm for me that something is different. Ideally, I shud have the same value for all the lines, meaning all the VALUE should be 1234 for different ENV.

0 Karma
1 Solution

test4u
Path Finder

HI,
I have used the following approaches:-
1. Run the following query to a bar chart
index="main" sourcetype="csv"|chart count by VALUE,ENV
and then use
"option name="charting.seriesColors">[C0392B,F1C40F]"

  1. you can use a pie chart and do ->>index="main" sourcetype="csv"|statscount by VALUE further you can user chart.fieldColors as follows :- " option name="charting.fieldColors">{1234:C0392B, 2345:F1C40F}" Let me know if any fulfills your purpose

View solution in original post

0 Karma

test4u
Path Finder

HI,
I have used the following approaches:-
1. Run the following query to a bar chart
index="main" sourcetype="csv"|chart count by VALUE,ENV
and then use
"option name="charting.seriesColors">[C0392B,F1C40F]"

  1. you can use a pie chart and do ->>index="main" sourcetype="csv"|statscount by VALUE further you can user chart.fieldColors as follows :- " option name="charting.fieldColors">{1234:C0392B, 2345:F1C40F}" Let me know if any fulfills your purpose
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...