help on coloring a threshold number with a unit value

[jip31]

hi

I use a search wich add a unit value at the end of the result (GB)

| eval FreeSpace=FreeSpace." GB", TotalSpace=TotalSpace." GB" 

I need to use a threshold coloring on this value but it doesnt works due to the unit value at the end...

      <colorPalette type="list">[#DC4E41,#F1813F,#53A051]</colorPalette>
      <scale type="threshold">10,80</scale>
    </format>

what i have to do please??

[vnravikumar · Accepted solution]

Hi

Check this sample

<dashboard>
  <label>table</label>
  <row>
    <panel>
      <table>
        <search>
          <query>index="_internal" |stats count by sourcetype </query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <format type="number" field="count">
           <option name="precision">0</option>
          <option name="useThousandSeparators">false</option>
          <option name="unit">GB</option>
          <option name="unitPosition">after</option>
        </format>
        <format type="color" field="count">
          <colorPalette type="list">[#DC4E41,#F1813F,#53A051]</colorPalette>
          <scale type="threshold">0,30,70,100</scale>
        </format>
      </table>
    </panel>
  </row>
</dashboard>

[jip31]

It doesnt works
stats latest(time) as time latest(FreeSpace) as FreeSpace by host
| eval FreeSpace=FreeSpace." GB", TotalSpace=TotalSpace." GB"
| rename FreeSpace as "Free space"

 <format type="number" field="Free space">
           <option name="useThousandSeparators">false</option>
           <option name="unit">GB</option>
           <option name="unitPosition">after</option>
         </format>
         <format type="color" field="Free space">
           <colorPalette type="list">[#DC4E41,#F1813F,#53A051]</colorPalette>
           <scale type="threshold">0,10,20,100</scale>
         </format>

[vnravikumar]

Hi
Remove | eval FreeSpace=FreeSpace." GB", TotalSpace=TotalSpace." GB" from your query and check

[jip31]

ok thanks.