Getting Data In

What different colors for bar graph

eholz1
Builder

Hello All.

I have a search: source="/var/log/squid/access.log" url NOT "esrs3-*" status = * | chart Count by status

This gives me a bar chart of the count of various http status codes, 200, 502, etc.

I want to divide the count by 100 if the count is greater than 300. and I would like to have a different color for each bar in the graph. there is only 1 field (count), is there a way I can get a different color for each status code which appears on the x-axis?  I have seen the series.Color command, but not sure how to apply it.

 

Thanks

EWH

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...

From GPU to Application: Monitoring Cisco AI Infrastructure with Splunk Observability ...

AI workloads are different. They demand specialized infrastructure—powerful GPUs, enterprise-grade networking, ...

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...