Splunk Search

Chart Background or Text Color

andrewkenth
Communicator

I have a chart displaying in dashboard panel. When a value is 0 I'd like to call it out by makeing the text or background of the cell a different color. Is this possible?

I have a chart coded like this:
... | chart count over source by Date

I've been playing with rangemap but it doesn't seem to be working:

index=charlesriver | bucket span=1d _time | stats count first(_time) as Date by _time, source | eval Date=strftime(Date,"%m/%d/%Y %A")  | eval source=replace(source,"/apps/wcm-splunk/work/crd/prod/","")  | eval source=substr(source,1,len(source)-13)  | table Date, source, count | chart count over source by Date | sort Date | rangemap field=count red=0-0 
Tags (2)
0 Karma

Patient
Path Finder

Hallo,
If you are using splunk 6 or more you can use this command: | rangemap field=count severe=0-0 because by default option severe is customized in the share css files and the test color is red:
Splunk_home\share\splunk\search_mrsparkle\exposed\css\bootstrap.min.css
You can have also elevated for color yellow …
Note that you can use this for stats command. For chart command I thing that you need to use Javascript for your dashboard. For more information read splunk Visualization manuel.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...

    Thursday, July 9, 2026  |  11:00AM–12:00PM PDT Duration: 1 hour (includes Q&A) Managing can feel like a ...

Upgrade Prep for 10.4, Network Observability Deep Dives, and More from Splunk Lantern

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Splunk Developer Day announcements: AI agents, MCP tools, Forecasting, and Custom ...

Splunk Developer Day was packed with product and platform updates for developers building in the AI ...