Splunk Search

cell color based on text pattern or partial text

lbonnes
Observer

I am using a Statistics table for the visualization of some data. Is there a way to colorize cells based on partial text values?

Example...      I want a different cell color based on the first 3 letters of the values .  I would want one cell color for all cells  that start with BAX,  a different color for cells that start with CAR ,  etc. 

BAX11ROW3 
BAX12ROW5
CAR01ROW4
CAR05ROW3
DOR01ROW6

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You can do this with CSS - essentially you need to have a multivalue field with the colour you want in the second value - this can be the result of some calculation e.g. based on the first three characters of the field - then you can follow this link to see how it is done in similar circumstances

https://community.splunk.com/t5/Dashboards-Visualizations/How-to-update-table-cell-color-as-per-the-...

 

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...