Dashboards & Visualizations

Table colouring by overall range

PickleRick
SplunkTrust
SplunkTrust

I'm a bit confused.

I tried to colour one of the columns in my table by the range of values in that table.

And it works.

Almost.

The problem is that colouring works separately for each page of results which is a bit ridiculous.

PickleRick_0-1636554258325.png

PickleRick_1-1636554265023.png

 

These are two pages from the same search. Kinda ridiculous, isn't it?

Is it that I'm doing something wrong? But it seems that there's no simpler way than chose "range", preset...

But how to make it work across whole results range (so my first screen shoud be mostly orange-ish (sorry, don't know how this colour is called in english), and the second should be blue)?

Labels (1)
0 Karma

soumyasaha25
Contributor

I am guessing you have used the Color settings with mode "scale" set to the Presets - divergent 

something like this:

soumyasaha25_1-1636556736813.png

so this applies the settings dynamically as you move to the later pages - page 1 vs page 13 in your screenshots. So this color scale maps the colors as  per the values in each page.

What you could do is:

option 1. Set some static ranges and associated color for them like below

soumyasaha25_0-1636556699300.png

option 2.  you could define a "custom" scale (as you did already) but define some sort of static range by specifying min, midpoint and max values for the logcount number

soumyasaha25_2-1636557487704.png

 

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Yeah, I know of those options but they each require me to input fixed values. That's the point.

If I can't help it, I'll have to do a dynamically created field used just for colouring and just hide it in the dashboard (won't work in a "normal" report) but it's not a very pretty solution.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...