Splunk Search

color statistic table cell dynamically on certain rule using other field value

Abhineet
Loves-to-Learn Everything

Want to change color of statistic table cell value on certain rule using other field.

TABLE:

Region, Device, Service, Leased License, Reserved License, Maximum License, Current Users

CHINAAMCDPVPN1DESKTOP170017002000638
 SCLAMPVPN1 1001002000
Republic Of KoreaAMKDPVPN1DESKTOP100010001300294
INDIAAMINDDPVPN1DESKTOP2200190025002083
SCLASCLADPVPN1DESKTOP400040005000549

 

"current users" cell should have color as below mentioned rule.

1. RED: if "Current Users" greater than or equal to "Reserved License"

2. YELLOW: if "Current users" greater than  85% of  "Reserved License" and less than "Reserved License" 

3. GREEN: If "Current users" less than  85% of  "Reserved License"

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Make current users a multi-value field with the second value evaluated to the colour you want (dependent on the conditions you mentioned). Then format the field colour based on the colour, and add CSS to hide the second multi-value in the current users column. See my solution to this post https://community.splunk.com/t5/Splunk-Search/How-to-color-the-columns-based-on-previous-column-valu... 

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...