Splunk Search

Conditional cell format without JS?

anonuser
Explorer

Hi, 

I would like to color the cells from a column table depending on their time value

is it possible to be done without JavaScript? Only with CSS and HTML?

For example:

For cells with values lower than  00:05:00 it should be green

For cells between values 00:05:00 and 00:15:00 it should be orange

For cells higher than 00:15:00 it should be red 

 

Labels (2)

anonuser
Explorer

Thanks @niketn but I tried another way and it worked fine!

<colorPalette type="expression">case (value =="-", "", value &gt; "00:15:00","#D3828C", value &lt;= "00:05:00" ,"#C8E8C6", value &gt; "00:05:00" and value &lt;= "00:15:00","#F2B094"</colorPalette>

0 Karma

niketn
Legend

@anonuser you will have to adopt the concepts from the following answer and change as per your needs. As far as you are able to use SPL to create a new field for applying color as per Time (same way you have defined in your question), you will need to use the new field for color SLA and use eval to suffix with a delimiter to the required field where you want color applied. Next you split the values by delimiter and then apply color using expressions colorPalette and finally use CSS override to hide the field value for color SLA that you have created.
https://community.splunk.com/t5/Dashboards-Visualizations/How-to-change-font-color-based-on-a-condit...

Please try out and confirm!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...