Dashboards & Visualizations

My CollorPallete expression is not working when using LIKE

Bleepie
Communicator

Dear community,

When using a CollorPallete expression on a statistics table the following code works:

<format type="color" field="myField">
    <colorPalette type="expression">if (value == "DEBUG", "#f54242","#65A637") 
    </colorPalette>
</format>

#F54242 = RED

#65A637 = GREEN

Because the data in myField is not exactly "DEBUG" , the table collumns are all green.  So in order to make the collumns with "DEBUG" red and the rest green, I tried the following piece of code:

<format type="color" field="myField">
    <colorPalette type="expression">if (like(value,"%DEBUG%", "#f54242","#65A637")
    </colorPalette>
</format>

 

This piece of code is not working at all. I am trying to use the wildcard to find any occurance of "DEBUG" inside myField. Not only are the fields not red, they are not even green, making me think my code is incorrect. 

What am I doing wrong? 

Thanks.

Labels (3)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

You need to close the brackets of the like function

if (like(value,"%DEBUG%"), "#f54242","#65A637")

If that doesn't work, try the match function.

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You need to close the brackets of the like function

if (like(value,"%DEBUG%"), "#f54242","#65A637")

If that doesn't work, try the match function.

0 Karma

Bleepie
Communicator

Whoops. Small mistake. Got it working. Thanks!

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...