Lets say I have a table with fields A, B, C, D. I would like to color rows based on the values of column D. Basically rows with same value of column D, should be in the same color. Is there a way this can be achieved in Splunk? Any help related to this will be appreciated!
Hi ektasardana,
have you already seen the "Splunk 7.x Dashboard Examples" App? (see https://splunkbase.splunk.com/app/1603/ )
In this app you can find two examples that could help you.
bye.
Giuseppe
Hi cusello,
Thank you for your response. I guess my problem here is a bit different from the one mentioned in the examples. Lets say column D has values "abc","bcd","abc","egg","bcd" so I would like to color row 1 and row 3 with color lets say red and row 2 and row 5 with color green. Also, I don't know the values of column D before hand.
How should I proceed in this case?
Thanks!
Hi ektasardana,
in the first example of the "Table Formats" dashboard there's an example that give a color to a cell (not the full row) based on a different value of the cell (not numeric).
<format type="color" field="sourcetype">
<colorPalette type="sharedList"></colorPalette>
<scale type="category"></scale>
</format>
Probably using CSS and/or javascript (modifying table_row_highlighting.js) it's possible to put the same color in all the row, but i don't think that it's possible in simple XML.
Bye.
Giuseppe