Splunk Search

How to set the threshold value for each value in the Field?

vvemula
Path Finder

I have results in the table, As shown the below:

Name               Time            Settingname               value 
OEK                09-16-2019      PWD.length                8
ELC                09-16-2019      timeout                   400
CMG                09-16-2019      PWmaxAttemts              3

--> I need Eval function ( for PWD.length, value is 😎 , whole row should be green. if other than value 8, whole row is Red
--> For the timeout ( for timeout, value is 400), whole row should be green. if other than value 400, whole row is Red

No Javascript or CSS.
Can someone please help me here?

Thanks in Advance.

0 Karma

vvemula
Path Finder

Thank you @jacobevans,

I have figured new way to resolve the issue.

--> I have created the lookup file with threshold value based on setting name
--> output lookup matched with setting name getting the threshold value
--> then I have matched the value vs Threshold value, and getting the value red or green in status column.

Thank you.

0 Karma

jacobpevans
Motivator

Greetings @vvemula,

Unfortunately, you need to use JS to accomplish this. Luckily, it's already been done for you in this app - you just need to copy and paste the relevant JS and CSS.

https://splunkbase.splunk.com/app/1603/

Cheers,
Jacob

If you feel this response answered your question, please do not forget to mark it as such. If it did not, but you do have the answer, feel free to answer your own post and accept that as the answer.
0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...