how do i change the color mappings in rangemap?

[timpgray]

Does anyone know how I would modify the color mappings used for rangemap?

[lguinn2]

In the rangemap command, you can use any categorization scheme that you like. You could call the categories A1, B2, C3 or just about anything else.

However, most people use one of these categories: low, guarded, elevated, high and severe - because the default Splunk CSS has already mapped these categories to the colors: green, blue, yellow, orange and red, respectively.

You can make your own categories by editing the application.css for a particular app. For example this defines a color for a Single Value Panel:

.SingleValue .purple {
       background-color: #660066;
       color: #ffffff;
}

defines a CSS class that can be referred to by the category name purple.

Just remember that you will need to edit the dashboard XML to make the color show up. In simple XML, this usually looks like:

<option name="classField">range</option>

More info here:

http://docs.splunk.com/Documentation/Splunk/5.0/AdvancedDev/UseCSS

http://docs.splunk.com/Documentation/Splunk/5.0/Viz/PanelreferenceforSimplifiedXML#Single_value_pane...