Dashboards & Visualizations

Need help with Single Value color based on text on the panel


| rex field=Uptime "(?<Uptime_Days>^([^d]+))"
| eval Uptime_Years=(Uptime_Days/365)
| dedup Host_Name
| eval Description=(case(Uptime_Years>=7, "Over 7 Years", Uptime_Years<7 AND Uptime_Years>3,"3 to 7 Years", Uptime_Years<3, "Less than 3 Years" ))
| rename Description as "Uptime_Category"
| stats count(Host_Name) as total by Uptime_Category
| eventstats sum(total) as grand_total
| eval percentage = round((total/grand_total)*100,1)
| table Uptime_Category percentage
| eval Description=(case(Uptime_Category="Over 7 Years" AND percentage>="10%","Poor",
 Uptime_Category="3 to 7 Years" AND percentage>="20%","Needs Attention", Uptime_Category="Less than 3 Years" AND percentage>="80%","Good" ))
| rename Description as "Health Status"
| stats count by "Health Status"

Need help with Color Coding Poor to "Red", Needs Attention to "Yellow", & Good to "Green" @niketnilay 

Labels (2)
0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!


Or Learn More in Our Blog >>