Dashboards & Visualizations

How to set color code result based on uniqueness

balash1979
Path Finder

I am running a query and it provides me the following result (as an example)

ENV VALUE
env1 1234
env2 2345
env3 1234
env4 2345

Is there a way I can color code the lines that are same, meaning, i would like in my panel to show a color for the lines
env1 1234
env3 1234

and some other color for lines
env2 2345
env4 2345

Basically, I am trying to do a color coding scheme so in my dashboard if my panel has different colors its an alarm for me that something is different. Ideally, I shud have the same value for all the lines, meaning all the VALUE should be 1234 for different ENV.

0 Karma
1 Solution

test4u
Path Finder

HI,
I have used the following approaches:-
1. Run the following query to a bar chart
index="main" sourcetype="csv"|chart count by VALUE,ENV
and then use
"option name="charting.seriesColors">[C0392B,F1C40F]"

  1. you can use a pie chart and do ->>index="main" sourcetype="csv"|statscount by VALUE further you can user chart.fieldColors as follows :- " option name="charting.fieldColors">{1234:C0392B, 2345:F1C40F}" Let me know if any fulfills your purpose

View solution in original post

0 Karma

test4u
Path Finder

HI,
I have used the following approaches:-
1. Run the following query to a bar chart
index="main" sourcetype="csv"|chart count by VALUE,ENV
and then use
"option name="charting.seriesColors">[C0392B,F1C40F]"

  1. you can use a pie chart and do ->>index="main" sourcetype="csv"|statscount by VALUE further you can user chart.fieldColors as follows :- " option name="charting.fieldColors">{1234:C0392B, 2345:F1C40F}" Let me know if any fulfills your purpose
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...