I'm trying to create a single column with status indicator for three different values from my table. just like the Table Icon Set in the Splunk Dashboard Example App.
Looking at this example of what output i'm trying
I have one column for rangemap with three different values
my data would look like this.
index=_internal | stats count by sourcetype,source,host | eval count2 = count*1.5 | eval count3=count*1.6
@niketnilay I use the red cross mark from emojibase in the way you have described above. I tried different versions, my problem is that , it is not coming in red colour, looks like the default colour of other texts in the table.
@njohnson7 you can refer to one of older Splunk Answers post, you can apply Table Cell color based on icon like check or cross as green and red respectively.
@niketnilay yea ofcourse cell colouring is what i have done for the time being. My question was only for the colour of the check mark and cross mark and likes. For instance , the hearts in your example seem to have colours on their own.
@njohnson7 thats the problem with Unicode characters. Only sometimes they can have colors of their own. You can use Simple XML JS extension instead to better control icons within table cells.
However, I tried the following icons and they worked fine for me.
@michaelrosello, while the best approach for you is to try this out using Simple XML JS Extension with Splunk JS Stack, I wanted to document a different approach.
PS: I am unable to post the Simple XML Dashboard Code with Unicode Characters on Splunk Answers, so I am attaching screenshot. You can pick the Unicode Characters for your SPL from the links provided for respective characters.
@michaelrosello please add more details around your requirement with single column with three values.
What is the query behind? If icon is not there what would be their respective values/thresholds? Also what is the reason for not splitting them in three columns? What would be the column name (in your sample screenshot it is single value called
The reason is I'm trying to make it look like a horizontal traffic light. there would be no null value as we can always use the fillnull function.
| have provided the query, there would be three values with different fieldname