Splunk Search

Is conditional background coloring possible in Splunk charts?

ashish9433
Communicator

Hi Team,

Can any one help me to know if conditional coloring is possible in Splunk Charts as shown in the below image?

Basically, the background color will be horizontal divisions on basis of condition defined, like for the below chart,
0-5 -> Low - Green Colour
6-25-> Medium - Yellow Colour
more than 25 -> High - Amber Colour

alt text

Please guide how such chart can be made in Splunk Dashboard.

Update

If not colouring, atleast can we add additional graph lines, perhaps dotted across the graph to show the threshold boundaries?

Anyone who can help on pointers on this?

1 Solution

Lucas_K
Motivator

If not colouring, atleast can we add additional graph lines, perhaps dotted across the graph to show the threshold boundaries?

That you can be done simply enough.

eval threshold1 = 100 ; eval threshold2 = 200 ; eval threshold1 = 500

Then just select each of those in the visualization panel as a new axis.

Example search : index=_internal | timechart count | eval Low=10, Med=20, High=50

Those numbers could be calculated in your search dynamically aswell.

And what it looks like

alt text

View solution in original post

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...