Splunk Search

How to assign colors for a choropleth map based on the range of counts?



I have a choropleth map, in which I have count like 0,179, 10, 65, 10

So , I want to put the color red if it is 0, green if it is 1-100, blue if it is 200-500, purple if it is 10000+, etc.

Please help me to get the color based on count range .. Please help !!




Set the colors as below in your xml (change the value as per what you have in the rangemep).

{"1. low":0x00D03E,"2. medium":0xFAFA35,"3. high":0xE2A703, "4. very high":0xD12802}

0 Karma


Can you provide a working example? Thanks!

0 Karma

New Member

base search|rangemap field=count green=0-5 red=5-10 yellow=11-20 default=gray| sort +count |
geom geo_countries
this is my query and I gave {"green":0xFF0000,"yellow":0xFFFF00,"red":0x00FF00} in XML code.
not able to highlight the region based on the color code.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Updates (ESCU) - New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 3 releases of new content via the Enterprise ...

Thought Leaders are Validating Your Hard Work and Training Rigor

As a Splunk enthusiast and member of the Splunk Community, you are one of thousands who recognize the value of ...

.conf23 Registration is Now Open!

Time to toss the .conf-etti 🎉 —  .conf23 registration is open!   Join us in Las Vegas July 17-20 for ...