Dashboards & Visualizations

I gave splunk table dashboard view. I need to highlight the "user" field all value with green. the all thefield value

abi2023
Path Finder

I gave splunk table dashboard view. I need to highlight the "user" field all value with green. all these field value in number and letter. how do I highlight all the value with green. When select Color "values" I can only Automatic but it giving random color. how do I give only green.

Labels (2)
Tags (1)
0 Karma

victor_menezes
Path Finder

Hi @abi2023 ,

It is not so clear to me if you want to apply color to the cells in the "user" column only if in a specific format and shape, so if you can clarify it would be nice.

You can apply that to the table section in your XML code by adding the Format tag with type color. Under that, you specify the type of coloring logic that can be dynamic, range, scale, etc...

For example, for a rule that will color the cells of User column whenever there is a value with a light green cell color:

<format type="color" field="user">
<colorPalette type="expression">if (isnotnull(value), "#00ff3c", "#f24949") </colorPalette>
</format>

Green will be valid values, red will be empty/null value cells.

Is something like that you're looking for?

Full sample:

<dashboard version="1.1" theme="dark">
  <label>My Dashboard</label>
  <row>
    <panel>
      <table>
        <search>
          <query>MySearchString</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
        </search>
        <option name="count">100</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">none</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
        <format type="color" field="user">
            <colorPalette type="expression">if (isnotnull(value), "#00ff3c", "#f24949")    </colorPalette>
        </format>
      </table>
    </panel>
  </row>
</dashboard>

 

Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...

Federated Search for Amazon S3 | Key Use Cases to Streamline Compliance Workflows

Modern business operations are supported by data compliance. As regulations evolve, organizations must ...