Dashboards & Visualizations

replacing no results found with 0 with a color in Splunk dashboard

anil1219
Engager

Hi Team,

How to replace no results found with 0 with a color in Splunk dashboard.

I know that by appending below it update 'no results found' with 0 value.

| appendpipe [stats count | where count=0]

But it comes with red color as 0 value, I want to change to green color.

even if I have changed Format Visualization --> Color range 

from 0-5 as Green

5-max as Red

 

Could you please let me know how I can get green color with value as 0 when there is 'no results found' 

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Try something like this

| appendpipe [| stats count as "Total impact %"| where 'Total impact %'=0]
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @anil1219 ,

there a request in Splunk ideas to add a feature to do this, please upvote it!

Anyway, using the solution you shared you should have 0 instead of "no results found".

For the green colour, in the classical interface dashboards (I'm not srìtill using Dashboard Studio) you should click on the pencil button in the panel of your dashboard.

Then you can choose the colour and set the range for your colours.

Ciao.

Giuseppe

0 Karma

anil1219
Engager
 
0 Karma
Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...