Dashboards & Visualizations

replacing no results found with 0 with a color in Splunk dashboard

anil1219
Engager

Hi Team,

How to replace no results found with 0 with a color in Splunk dashboard.

I know that by appending below it update 'no results found' with 0 value.

| appendpipe [stats count | where count=0]

But it comes with red color as 0 value, I want to change to green color.

even if I have changed Format Visualization --> Color range 

from 0-5 as Green

5-max as Red

 

Could you please let me know how I can get green color with value as 0 when there is 'no results found' 

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Try something like this

| appendpipe [| stats count as "Total impact %"| where 'Total impact %'=0]
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @anil1219 ,

there a request in Splunk ideas to add a feature to do this, please upvote it!

Anyway, using the solution you shared you should have 0 instead of "no results found".

For the green colour, in the classical interface dashboards (I'm not srìtill using Dashboard Studio) you should click on the pencil button in the panel of your dashboard.

Then you can choose the colour and set the range for your colours.

Ciao.

Giuseppe

0 Karma

anil1219
Engager
 
0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...