hi
I use a search wich add a unit value at the end of the result (GB)
| eval FreeSpace=FreeSpace." GB", TotalSpace=TotalSpace." GB"
I need to use a threshold coloring on this value but it doesnt works due to the unit value at the end...
<colorPalette type="list">[#DC4E41,#F1813F,#53A051]</colorPalette>
<scale type="threshold">10,80</scale>
</format>
what i have to do please??
Hi
Check this sample
<dashboard>
<label>table</label>
<row>
<panel>
<table>
<search>
<query>index="_internal" |stats count by sourcetype </query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
<format type="number" field="count">
<option name="precision">0</option>
<option name="useThousandSeparators">false</option>
<option name="unit">GB</option>
<option name="unitPosition">after</option>
</format>
<format type="color" field="count">
<colorPalette type="list">[#DC4E41,#F1813F,#53A051]</colorPalette>
<scale type="threshold">0,30,70,100</scale>
</format>
</table>
</panel>
</row>
</dashboard>
Hi
Check this sample
<dashboard>
<label>table</label>
<row>
<panel>
<table>
<search>
<query>index="_internal" |stats count by sourcetype </query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
<format type="number" field="count">
<option name="precision">0</option>
<option name="useThousandSeparators">false</option>
<option name="unit">GB</option>
<option name="unitPosition">after</option>
</format>
<format type="color" field="count">
<colorPalette type="list">[#DC4E41,#F1813F,#53A051]</colorPalette>
<scale type="threshold">0,30,70,100</scale>
</format>
</table>
</panel>
</row>
</dashboard>
It doesnt works
stats latest(time) as time latest(FreeSpace) as FreeSpace by host
| eval FreeSpace=FreeSpace." GB", TotalSpace=TotalSpace." GB"
| rename FreeSpace as "Free space"
<format type="number" field="Free space">
<option name="useThousandSeparators">false</option>
<option name="unit">GB</option>
<option name="unitPosition">after</option>
</format>
<format type="color" field="Free space">
<colorPalette type="list">[#DC4E41,#F1813F,#53A051]</colorPalette>
<scale type="threshold">0,10,20,100</scale>
</format>
Hi
Remove | eval FreeSpace=FreeSpace." GB", TotalSpace=TotalSpace." GB"
from your query and check
ok thanks.