Splunk Search

Is there any way to show the column in different color for bar graph, where count is more than certain level.

cadrija
Path Finder

I need to show a bar graph having error login count from different IPs over time.

User wants  me to show the columns in red where the login count is => 6 

For login count < 6 columns in green.

How can I achieve this, kindly help.

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Bar graphs display a number of series of values. Each series can be a different colour. If you split your results up so that for each ip you have counts greater than 5 and another one for counts less than 6, you could then colour them differently. You can't change the colour of the series midway through

Short answer: it can't be achieved in the way you want (or rather your user wants)

cadrija
Path Finder

Thanks for the help @ITWhisperer 

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...