Splunk Search

How to use fieldcolors

ericvdhout
Path Finder

Hi,

 

In one of my graphs I try to fixate the areacolors to red and green. However, I can't figure out how.

Tried this:

 

 

 

"visualizations": {
		"viz_CgGpI6E0": {
			"type": "splunk.area",
			"dataSources": {
				"primary": "ds_aNB3d69r_ds_d4nLznpt"
			},
			"title": "Nanoservice request results",
			"options": {
				"stackMode": "stacked100"
			},
			"fieldColors": {
				"OKPerc": "#42663a",
				"ErrorPerc": "#7a1709"
			},
			"showProgressBar": false,
			"showLastUpdated": false
		},
		"viz_r9Pd57Q4": {
			"type": "splunk.markdown",
			"options": {
				"markdown": ""
			}
		}
	},

 

Also tried placing them inside the "Options" object.

	"visualizations": {
		"viz_CgGpI6E0": {
			"type": "splunk.area",
			"dataSources": {
				"primary": "ds_aNB3d69r_ds_d4nLznpt"
			},
			"title": "Nanoservice request results",
			"options": {
				"stackMode": "stacked100",
				"fieldColors": {
					"OKPerc": "#42663a",
					"ErrorPerc": "#7a1709"
				}
			},
			"showProgressBar": false,
			"showLastUpdated": false
		},
	},

 

But the colors stay wrong. Am I doing it wrong?

Current graph: 

ericvdhout_0-1652104750371.png

Purple should be green and blue should be red.

Cheers,

Labels (1)
0 Karma
1 Solution

ericvdhout
Path Finder

No idea what FieldColors does, but SeriesColors seems to be my friend.

 

 

 

		"viz_CgGpI6E0": {
			"type": "splunk.area",
			"dataSources": {
				"primary": "ds_aNB3d69r_ds_d4nLznpt"
			},
			"title": "Nanoservice request results",
			"options": {
				"stackMode": "stacked100",
				"seriesColors": "[#42663a,#7a1709]"
			},
			"showProgressBar": false,
			"showLastUpdated": false
		}

ericvdhout_0-1652106116022.png

 

View solution in original post

0 Karma

ericvdhout
Path Finder

No idea what FieldColors does, but SeriesColors seems to be my friend.

 

 

 

		"viz_CgGpI6E0": {
			"type": "splunk.area",
			"dataSources": {
				"primary": "ds_aNB3d69r_ds_d4nLznpt"
			},
			"title": "Nanoservice request results",
			"options": {
				"stackMode": "stacked100",
				"seriesColors": "[#42663a,#7a1709]"
			},
			"showProgressBar": false,
			"showLastUpdated": false
		}

ericvdhout_0-1652106116022.png

 

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...