Splunk Search

How to set the threshold value for each value in the Field?

vvemula
Path Finder

I have results in the table, As shown the below:

Name               Time            Settingname               value 
OEK                09-16-2019      PWD.length                8
ELC                09-16-2019      timeout                   400
CMG                09-16-2019      PWmaxAttemts              3

--> I need Eval function ( for PWD.length, value is 😎 , whole row should be green. if other than value 8, whole row is Red
--> For the timeout ( for timeout, value is 400), whole row should be green. if other than value 400, whole row is Red

No Javascript or CSS.
Can someone please help me here?

Thanks in Advance.

0 Karma

vvemula
Path Finder

Thank you @jacobevans,

I have figured new way to resolve the issue.

--> I have created the lookup file with threshold value based on setting name
--> output lookup matched with setting name getting the threshold value
--> then I have matched the value vs Threshold value, and getting the value red or green in status column.

Thank you.

0 Karma

jacobpevans
Motivator

Greetings @vvemula,

Unfortunately, you need to use JS to accomplish this. Luckily, it's already been done for you in this app - you just need to copy and paste the relevant JS and CSS.

https://splunkbase.splunk.com/app/1603/

Cheers,
Jacob

If you feel this response answered your question, please do not forget to mark it as such. If it did not, but you do have the answer, feel free to answer your own post and accept that as the answer.
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...