Dashboards & Visualizations

Single value chart/trellis with smiley and other data

prettysunshinez
Explorer

Hi,

I have a query such as below.

index = abc* host=efg* 
|stats latest(_time) as latest by host 
| eval Status = case (latest <= relative_time(now(),"-15m") AND latest > relative_time(now(),"-30m")," smiley1 ", latest <= relative_time(now(),"-30m"),"smilye2 ",true(),"smiley3" ) |eval Last_Updated_Time = strftime(latest,"%c") 

I now wanted to view the output in either single value chart or in trellis mode with the host name,smiley and the Last_Updated_Time below the icon.
I do not have access to use to css or js script.
Suggestions pls

Thanks in advance.

Labels (2)
0 Karma

prettysunshinez
Explorer

I have this done by myself.
Thanks 🙂

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...