Here is what is needed :
logLevel : INFO -> Blue
logLevel : WARRNING -> Yellow
logLevel : ERROR -> Red
Below code is not working for me
<format type="color">
<colorPalette type="expression">
if(match(value,"logLevel=INFO"),"#4f34eb",null),
if(match(value,"logLevel=WARNING"),"#ffff00",null),
if(match(value,"logLevel=ERROR"),"#53A051",null)
</colorPalette> </format>
is there an options for colors similar to charting?
<option name="charting.chart">line</option>
<!--[Total,Critical,Major,Minor,Notice,Healthy]-->
<option name="charting.seriesColors">[17202A,C0392B,F5B041,F7DC6F,D5DBDB,3DB42A]</option>
<!--[black, red, orange, yellow, grey, green]-->
Generally these format options apply to the cell - so you can colour a cell using the expression option, but you need to specify the field as part of the <format> specifier, see
https://docs.splunk.com/Documentation/SplunkCloud/latest/Viz/TableFormatsXML#Color_format_rules
Take a look at the dashboard examples app
https://splunkbase.splunk.com/app/1603
as that has some Javascript examples on how to colour rows based on cell values. See the Table Row Highlighting example.