Splunk Search

Add image to search

pinzer
Path Finder

Hi, i need to add an image like green, yellow, red to a rangemap search. Instead of the string of the rangemap.

eventtype="searchIPS1" | chart count | rangemap field=count GREEN-IMAGE=1-30 YELLOW-IMAGE=31-39 RED-IMAGE=40-5900 default=GRAY-IMAGE


Something like this it's possible?
thanks

Tags (2)
0 Karma

hazekamp
Builder

If you are using the SingleValue module via Advanced XML on a Splunk dashboard you can override the default look/feel of the range via $SPLUNK_HOME/etc/apps/$your_app$/appserver/static/application.css.

We do this in ESS like so (here we are overriding the default low/elevated/severe values):

.SingleValue .severe {
    background-color: transparent;
    background-image: url('images/high.png');
    color: #333333;
}

.SingleValue .elevated {
    background-color: transparent;
    background-image: url('images/medium.png');
    color: #333333;
}

.SingleValue .low {
    background-color: transparent;
    background-image: url('images/low.png');
    color: #333333;
}

There are some advanced things you can do as well...For instance, SingleValue takes an "additionalClass" parameter such that you can specify "An optional additional css class name to add to the result container".

See also: http://www.splunk.com/base/Documentation/4.2/Developer/AddASingleButton

0 Karma

ftk
Motivator

Take a look at the iconify search command. You may be able to achieve your goal with it.

0 Karma

pinzer
Path Finder

thanks but is not what i'm searching

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...