Splunk Search

Conditional cell format without JS?

anonuser
Explorer

Hi, 

I would like to color the cells from a column table depending on their time value

is it possible to be done without JavaScript? Only with CSS and HTML?

For example:

For cells with values lower than  00:05:00 it should be green

For cells between values 00:05:00 and 00:15:00 it should be orange

For cells higher than 00:15:00 it should be red 

 

Labels (2)

anonuser
Explorer

Thanks @niketn but I tried another way and it worked fine!

<colorPalette type="expression">case (value =="-", "", value &gt; "00:15:00","#D3828C", value &lt;= "00:05:00" ,"#C8E8C6", value &gt; "00:05:00" and value &lt;= "00:15:00","#F2B094"</colorPalette>

0 Karma

niketn
Legend

@anonuser you will have to adopt the concepts from the following answer and change as per your needs. As far as you are able to use SPL to create a new field for applying color as per Time (same way you have defined in your question), you will need to use the new field for color SLA and use eval to suffix with a delimiter to the required field where you want color applied. Next you split the values by delimiter and then apply color using expressions colorPalette and finally use CSS override to hide the field value for color SLA that you have created.
https://community.splunk.com/t5/Dashboards-Visualizations/How-to-change-font-color-based-on-a-condit...

Please try out and confirm!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
Get Updates on the Splunk Community!

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...

4 Ways the Splunk Community Helps You Prepare for .conf25

.conf25 is right around the corner, and whether you’re a first-time attendee or a seasoned Splunker, the ...