- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk Dashboard Studio: Why is Setting graph colors with fieldColors not working?
triptraptresko
Explorer
08-12-2022
02:37 AM
Trying to set graph colors with fieldColors in options, in Dashboard Studio.
Tried to set them in both dataSources and Visualizations to no avail. What am i doing wrong?
Tested on Splunk Cloud Version: 8.2.2203.2.
Whole code for dashboard below
{
"dataSources": {
"ds_sourcetype": {
"type": "ds.search",
"options": {
"query": "index=_internal _sourcetype IN ( splunk_web_access, splunkd_access)\n| timechart count by _sourcetype",
"fieldColors": {
"splunk_web_access": "#FF0000",
"splunkd_access": "#0000FF"
}
},
"name": "Search_1"
}
},
"visualizations": {
"viz_sourcetype": {
"type": "splunk.line",
"options": {
"fieldColors": {
"splunk_web_access": "#FF0000",
"splunkd_access": "#0000FF"
},
"yAxisAbbreviation": "auto",
"y2AxisAbbreviation": "auto",
"showRoundedY2AxisLabels": false,
"legendTruncation": "ellipsisMiddle",
"showY2MajorGridLines": true,
"xAxisLabelRotation": 0,
"xAxisTitleVisibility": "show",
"yAxisTitleVisibility": "show",
"y2AxisTitleVisibility": "show",
"yAxisScale": "linear",
"showOverlayY2Axis": false,
"nullValueDisplay": "gaps",
"dataValuesDisplay": "off",
"showSplitSeries": false,
"showIndependentYRanges": false,
"legendMode": "standard",
"legendDisplay": "right",
"lineWidth": 2,
"backgroundColor": "#ffffff"
},
"dataSources": {
"primary": "ds_sourcetype"
}
}
},
"inputs": {
"input_global_trp": {
"type": "input.timerange",
"options": {
"token": "global_time",
"defaultValue": "-24h@h,now"
},
"title": "Global Time Range"
}
},
"layout": {
"type": "grid",
"options": {},
"structure": [
{
"item": "viz_sourcetype",
"type": "block",
"position": {
"x": 0,
"y": 0,
"w": 1200,
"h": 400
}
}
],
"globalInputs": [
"input_global_trp"
]
},
"title": "dashboard_studio_test",
"defaults": {
"dataSources": {
"ds.search": {
"options": {
"queryParameters": {
"latest": "$global_time.latest$",
"earliest": "$global_time.earliest$"
}
}
}
}
}
}
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
mpalarchio
![Splunk Employee Splunk Employee](/html/@F88B7774A2BF2E9108D79A067A92A581/rank_icons/employee-16.png)
Splunk Employee
08-18-2022
02:33 PM
Hi @triptraptresko !
If you were using the older viz.line type visualization, you would be correct about using the option fieldColors - however, you're using the newer splunk.line type, which uses an option called seriesColorsByField to accomplish the same thing.
Try swapping the name of the options and it should work!
![](/skins/images/396DDBEEAC295EB5FEC41FF128E8AC0A/responsive_peak/images/icon_anonymous_message.png)