Splunk Search

How to set the threshold value for each value in the Field?

vvemula
Path Finder

I have results in the table, As shown the below:

Name               Time            Settingname               value 
OEK                09-16-2019      PWD.length                8
ELC                09-16-2019      timeout                   400
CMG                09-16-2019      PWmaxAttemts              3

--> I need Eval function ( for PWD.length, value is 😎 , whole row should be green. if other than value 8, whole row is Red
--> For the timeout ( for timeout, value is 400), whole row should be green. if other than value 400, whole row is Red

No Javascript or CSS.
Can someone please help me here?

Thanks in Advance.

0 Karma

vvemula
Path Finder

Thank you @jacobevans,

I have figured new way to resolve the issue.

--> I have created the lookup file with threshold value based on setting name
--> output lookup matched with setting name getting the threshold value
--> then I have matched the value vs Threshold value, and getting the value red or green in status column.

Thank you.

0 Karma

jacobpevans
Motivator

Greetings @vvemula,

Unfortunately, you need to use JS to accomplish this. Luckily, it's already been done for you in this app - you just need to copy and paste the relevant JS and CSS.

https://splunkbase.splunk.com/app/1603/

Cheers,
Jacob

If you feel this response answered your question, please do not forget to mark it as such. If it did not, but you do have the answer, feel free to answer your own post and accept that as the answer.
0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...