I gave splunk table dashboard view. I need to highlight the "user" field all value with green. the all thefield value

[abi2023]

I gave splunk table dashboard view. I need to highlight the "user" field all value with green. all these field value in number and letter. how do I highlight all the value with green. When select Color "values" I can only Automatic but it giving random color. how do I give only green.

[victor_menezes]

Hi @abi2023 ,

It is not so clear to me if you want to apply color to the cells in the "user" column only if in a specific format and shape, so if you can clarify it would be nice.

You can apply that to the table section in your XML code by adding the Format tag with type color. Under that, you specify the type of coloring logic that can be dynamic, range, scale, etc...

For example, for a rule that will color the cells of User column whenever there is a value with a light green cell color:

<format type="color" field="user">
<colorPalette type="expression">if (isnotnull(value), "#00ff3c", "#f24949") </colorPalette>
</format>

Green will be valid values, red will be empty/null value cells.

Is something like that you're looking for?

Full sample:

<dashboard version="1.1" theme="dark">
  <label>My Dashboard</label>
  <row>
    <panel>
      <table>
        <search>
          <query>MySearchString</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
        </search>
        <option name="count">100</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">none</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
        <format type="color" field="user">
            <colorPalette type="expression">if (isnotnull(value), "#00ff3c", "#f24949")    </colorPalette>
        </format>
      </table>
    </panel>
  </row>
</dashboard>