Splunk Search

Color individual table cell based on value of other table cell

Marcovd
Explorer

I have a table with different columns like:
C1 C2 C3 C1Code C2Code C3Code

I would like to color the cell in a column (C1, C2 or C3) depending of the value in the cells C1Code, C2Code or C3Code.
(I'm able to color the cell C1Code, C2Code and C3Code depending on the value of those cells)

Tags (3)
1 Solution

vganjare
Builder

If you are using cell renderer, you can combine fields C1 and C1Code into one (seperated by delimeter). Use this field in column C1. In the JS, when you read this field, extract the value for C1 and C1Code (by splitting at delimeter). Replace the cell text with C1 value and set the cell color using C1Code.

Thanks!!

View solution in original post

vganjare
Builder

If you are using cell renderer, you can combine fields C1 and C1Code into one (seperated by delimeter). Use this field in column C1. In the JS, when you read this field, extract the value for C1 and C1Code (by splitting at delimeter). Replace the cell text with C1 value and set the cell color using C1Code.

Thanks!!

Marcovd
Explorer

Hi vganjare, thanks for your fast answer, but can you please explain some more?

Where do I combine the columns, in the search in splunk?
Can you maybe give me an example of the .js code?

Thanks

0 Karma

Marcovd
Explorer

Solved it like vganjare suggested 🙂

  • Added | eval C1=C1 +";" + C1Code to the search
  • Added cell.value.split(";")[1] to the javascript
  • Added $td.text(cell.value.split(";")[0]) to the javascript

Thanks vganjare

Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...