Splunk Search

How to display search results like a heatmap?

jip31
Motivator

Hi

I use the search below

 

<row>
    <panel>
      <table>
        <search>
          <query>index=toto sourcetype=tutu
| timechart span=5m perc90(citr) as cit</query>
          <earliest>-4h@m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <option name="refresh.display">progressbar</option>
        <format type="color" field="citr>
          <colorPalette type="list">[#DC4E41,#F1813F,#53A051]</colorPalette>
          <scale type="threshold">0,22000,24000,27000</scale>
        </format>
      </table>
    </panel>
  </row>

 

As you can see, the results are colored in green, orange or red following the result value 

I would like to display the results like an heatmap

It means that I would like to have the _time fields in an x axis and to display just the color results without the value results

something like this

jip31_0-1646461842055.png

 

Is is possible to do that just with a table viz?

Regards

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...