Dashboards & Visualizations

Is it possible to color the FONT text of the row based on condition not the background COLOR please ??

a1bg503461
Explorer

Here is what is needed :

logLevel : INFO -> Blue

logLevel : WARRNING -> Yellow

logLevel : ERROR -> Red

 

a1bg503461_0-1732030753047.png

 


Below code is not working for me 

 

 

 

<format type="color">

<colorPalette type="expression">

if(match(value,"logLevel=INFO"),"#4f34eb",null),
if(match(value,"logLevel=WARNING"),"#ffff00",null),
if(match(value,"logLevel=ERROR"),"#53A051",null)

</colorPalette> </format>

 

 

 




 is there an options for colors similar to charting?

 

 

 

 

 <option name="charting.chart">line</option>
                                     <!--[Total,Critical,Major,Minor,Notice,Healthy]-->
    <option name="charting.seriesColors">[17202A,C0392B,F5B041,F7DC6F,D5DBDB,3DB42A]</option>
                                     <!--[black, red, orange, yellow, grey, green]-->
 

 

 

 

 

Labels (2)
0 Karma

bowesmana
SplunkTrust
SplunkTrust

Generally these format options apply to the cell - so you can colour a cell using the expression option, but you need to specify the field as part of the <format> specifier, see

https://docs.splunk.com/Documentation/SplunkCloud/latest/Viz/TableFormatsXML#Color_format_rules

Take a look at the dashboard examples app

https://splunkbase.splunk.com/app/1603

as that has some Javascript examples on how to colour rows based on cell values.  See the Table Row Highlighting example.

 

 

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...