Splunk Search

Color individual table cell based on value of other table cell

Marcovd
Explorer

I have a table with different columns like:
C1 C2 C3 C1Code C2Code C3Code

I would like to color the cell in a column (C1, C2 or C3) depending of the value in the cells C1Code, C2Code or C3Code.
(I'm able to color the cell C1Code, C2Code and C3Code depending on the value of those cells)

Tags (3)
1 Solution

vganjare
Builder

If you are using cell renderer, you can combine fields C1 and C1Code into one (seperated by delimeter). Use this field in column C1. In the JS, when you read this field, extract the value for C1 and C1Code (by splitting at delimeter). Replace the cell text with C1 value and set the cell color using C1Code.

Thanks!!

View solution in original post

vganjare
Builder

If you are using cell renderer, you can combine fields C1 and C1Code into one (seperated by delimeter). Use this field in column C1. In the JS, when you read this field, extract the value for C1 and C1Code (by splitting at delimeter). Replace the cell text with C1 value and set the cell color using C1Code.

Thanks!!

Marcovd
Explorer

Hi vganjare, thanks for your fast answer, but can you please explain some more?

Where do I combine the columns, in the search in splunk?
Can you maybe give me an example of the .js code?

Thanks

0 Karma

Marcovd
Explorer

Solved it like vganjare suggested 🙂

  • Added | eval C1=C1 +";" + C1Code to the search
  • Added cell.value.split(";")[1] to the javascript
  • Added $td.text(cell.value.split(";")[0]) to the javascript

Thanks vganjare

Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...