Splunk Dev

How to apply the field color on the table results with multi-value fields based on the first value

kelz
Explorer

Is it possible to apply the color based on the first value on the multi-value fields?

Below is the sample data. If the first value of server_status is Online then the field color should turn into green else the color will be red.

hostnameserver_status
server101Online
Offline (31 days ago)
  
  
hostnameserver_status
server101Offline (31 days ago)
Online




Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You can change the background rather than the font colour using colorPalette - add another multivalue with a value representing the colour you want used, then use CSS to hide the extra value.

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...