Splunk Search

Conditional cell format without JS?



I would like to color the cells from a column table depending on their time value

is it possible to be done without JavaScript? Only with CSS and HTML?

For example:

For cells with values lower than  00:05:00 it should be green

For cells between values 00:05:00 and 00:15:00 it should be orange

For cells higher than 00:15:00 it should be red 


Labels (2)


Thanks @niketn but I tried another way and it worked fine!

<colorPalette type="expression">case (value =="-", "", value &gt; "00:15:00","#D3828C", value &lt;= "00:05:00" ,"#C8E8C6", value &gt; "00:05:00" and value &lt;= "00:15:00","#F2B094"</colorPalette>

0 Karma


@anonuser you will have to adopt the concepts from the following answer and change as per your needs. As far as you are able to use SPL to create a new field for applying color as per Time (same way you have defined in your question), you will need to use the new field for color SLA and use eval to suffix with a delimiter to the required field where you want color applied. Next you split the values by delimiter and then apply color using expressions colorPalette and finally use CSS override to hide the field value for color SLA that you have created.

Please try out and confirm!

| makeresults | eval message= "Happy Splunking!!!"
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...