I am stuck with 2 questions may be due to my Splunk query knowledge, hope you allcan help me in resolving the same.
I have to dynamically remove a Responsetime field from a search when ComponentName is XYZ. I treid using if command splunk fields is not supported in it i believe. We are getting the ComponentName from drilldown via a token.
I have to dynamically change the color of a panel based on the threshold value from a lookup table. Example:-
for ComponentName=xyz the threshold is 900 than the color should should be changed when threshold > 900 to red and threshold <900 to green.