Splunk Search

color statistic table cell dynamically on certain rule using other field value

Abhineet
Loves-to-Learn Everything

Want to change color of statistic table cell value on certain rule using other field.

TABLE:

Region, Device, Service, Leased License, Reserved License, Maximum License, Current Users

CHINAAMCDPVPN1DESKTOP170017002000638
 SCLAMPVPN1 1001002000
Republic Of KoreaAMKDPVPN1DESKTOP100010001300294
INDIAAMINDDPVPN1DESKTOP2200190025002083
SCLASCLADPVPN1DESKTOP400040005000549

 

"current users" cell should have color as below mentioned rule.

1. RED: if "Current Users" greater than or equal to "Reserved License"

2. YELLOW: if "Current users" greater than  85% of  "Reserved License" and less than "Reserved License" 

3. GREEN: If "Current users" less than  85% of  "Reserved License"

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Make current users a multi-value field with the second value evaluated to the colour you want (dependent on the conditions you mentioned). Then format the field colour based on the colour, and add CSS to hide the second multi-value in the current users column. See my solution to this post https://community.splunk.com/t5/Splunk-Search/How-to-color-the-columns-based-on-previous-column-valu... 

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...