Splunk Search

How to edit XML to set certain colors for bars in a chart based on percentage values from my data?

splunkman341
Communicator

Hi guys,

I am trying to edit a chart I have to have certain colors corresponding to the data inside. I have 5 servers with the same paths, just different server names and the graph indicates the percentage of the file system that is being used. For example, "server 1" is displaying a 47 because 47% of the file system is being used. I want to have any bar greater than 80% to display as red, between 50-80% to display as yellow, and less than 50% to make green.

Thanks in advance for your help

0 Karma

neelamssantosh
Contributor

Go the panel--> edit source-->

  {"80%": ff0000 , "50%-80%": FFFF00 , "Less Than 50%":00ff00 }
</option>

ff0000 for Red

FFFF00 for Yellow

00ff00 for Green

For reference:
http://docs.splunk.com/Documentation/Splunk/6.2.3/Viz/BuildandeditdashboardswithSimplifiedXML#Specif...

splunkman341
Communicator

I have tried adding this line into the xml, as well as altering the numbers inside to exclude the percentages, and in both cases, the chart still has its multi colors. Any other suggestions on what to do?

{"80%-100%": ff0000 , "50%-80%": FFFF00 , "Less Than 50%":00ff00 }

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...