Hello!
Dark mode still does not work in Splunk Enterprise 9.2.1 when an emoji is in one of the visualizations, like a single for example.
Here is run anywhere dashboard. Just set it do dark mode and it stops working. Remove the pizza and it works again. If you are in dark mode already and add the emoji then after initial save it will work, but after refreshing it reverts to light. If you don't like pizza then add an emoji of choice.
<dashboard version="1.1" theme="light">
<label>pizza dark test</label>
<row>
<panel>
<single>
<search>
<query>| makeresults
| eval emoji="ciao🍕"
| table emoji</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="colorBy">value</option>
<option name="colorMode">none</option>
<option name="drilldown">none</option>
<option name="numberPrecision">0</option>
<option name="rangeColors">["0x53a051", "0x0877a6", "0xf8be34", "0xf1813f", "0xdc4e41"]</option>
<option name="rangeValues">[0,30,70,100]</option>
<option name="refresh.display">progressbar</option>
<option name="showSparkline">1</option>
<option name="showTrendIndicator">1</option>
<option name="trellis.enabled">0</option>
<option name="trellis.scales.shared">1</option>
<option name="trellis.size">medium</option>
<option name="trendColorInterpretation">standard</option>
<option name="trendDisplayMode">absolute</option>
<option name="unitPosition">after</option>
<option name="useColors">0</option>
<option name="useThousandSeparators">1</option>
</single>
</panel>
</row>
</dashboard>
Thanks!
Andrew