Splunk Dev

How to apply the field color on the table results with multi-value fields based on the first value

kelz
Explorer

Is it possible to apply the color based on the first value on the multi-value fields?

Below is the sample data. If the first value of server_status is Online then the field color should turn into green else the color will be red.

hostnameserver_status
server101Online
Offline (31 days ago)
  
  
hostnameserver_status
server101Offline (31 days ago)
Online




Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You can change the background rather than the font colour using colorPalette - add another multivalue with a value representing the colour you want used, then use CSS to hide the extra value.

0 Karma
Get Updates on the Splunk Community!

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

Splunk New Course Releases for a Changing World

Every day, the world feels like it’s moving faster with new technological breakthroughs, AI innovation, and ...

Insights from .conf 2025, Smart Edge Processor Scaling, and a New Splunk Lantern ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...