Dashboards & Visualizations

How to set color code result based on uniqueness

balash1979
Path Finder

I am running a query and it provides me the following result (as an example)

ENV VALUE
env1 1234
env2 2345
env3 1234
env4 2345

Is there a way I can color code the lines that are same, meaning, i would like in my panel to show a color for the lines
env1 1234
env3 1234

and some other color for lines
env2 2345
env4 2345

Basically, I am trying to do a color coding scheme so in my dashboard if my panel has different colors its an alarm for me that something is different. Ideally, I shud have the same value for all the lines, meaning all the VALUE should be 1234 for different ENV.

0 Karma
1 Solution

test4u
Path Finder

HI,
I have used the following approaches:-
1. Run the following query to a bar chart
index="main" sourcetype="csv"|chart count by VALUE,ENV
and then use
"option name="charting.seriesColors">[C0392B,F1C40F]"

  1. you can use a pie chart and do ->>index="main" sourcetype="csv"|statscount by VALUE further you can user chart.fieldColors as follows :- " option name="charting.fieldColors">{1234:C0392B, 2345:F1C40F}" Let me know if any fulfills your purpose

View solution in original post

0 Karma

test4u
Path Finder

HI,
I have used the following approaches:-
1. Run the following query to a bar chart
index="main" sourcetype="csv"|chart count by VALUE,ENV
and then use
"option name="charting.seriesColors">[C0392B,F1C40F]"

  1. you can use a pie chart and do ->>index="main" sourcetype="csv"|statscount by VALUE further you can user chart.fieldColors as follows :- " option name="charting.fieldColors">{1234:C0392B, 2345:F1C40F}" Let me know if any fulfills your purpose
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

AI + Observability: AI Agents, LLMs, Apps, & Infrastructure The rapid evolution of artificial intelligence ...

Splunk Technical Support Is Moving to Cisco Support Tools

Introduction Splunk technical support is transitioning to Cisco’s support environment. This change brings ...