Dashboards & Visualizations

Is it possible to color the FONT text of the row based on condition not the background COLOR please ??

a1bg503461
Explorer

Here is what is needed :

logLevel : INFO -> Blue

logLevel : WARRNING -> Yellow

logLevel : ERROR -> Red

 

a1bg503461_0-1732030753047.png

 


Below code is not working for me 

 

 

 

<format type="color">

<colorPalette type="expression">

if(match(value,"logLevel=INFO"),"#4f34eb",null),
if(match(value,"logLevel=WARNING"),"#ffff00",null),
if(match(value,"logLevel=ERROR"),"#53A051",null)

</colorPalette> </format>

 

 

 




 is there an options for colors similar to charting?

 

 

 

 

 <option name="charting.chart">line</option>
                                     <!--[Total,Critical,Major,Minor,Notice,Healthy]-->
    <option name="charting.seriesColors">[17202A,C0392B,F5B041,F7DC6F,D5DBDB,3DB42A]</option>
                                     <!--[black, red, orange, yellow, grey, green]-->
 

 

 

 

 

Labels (2)
0 Karma

bowesmana
SplunkTrust
SplunkTrust

Generally these format options apply to the cell - so you can colour a cell using the expression option, but you need to specify the field as part of the <format> specifier, see

https://docs.splunk.com/Documentation/SplunkCloud/latest/Viz/TableFormatsXML#Color_format_rules

Take a look at the dashboard examples app

https://splunkbase.splunk.com/app/1603

as that has some Javascript examples on how to colour rows based on cell values.  See the Table Row Highlighting example.

 

 

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...