Hello,
Here is my dashboard before using the transpose command
index=oit_printer_monitoring AND type=Printer
| eval timeConvDate=strftime(_time,"%a %m-%d-%Y")
| eval timeConvTime=strftime...
See more...
Hello,
Here is my dashboard before using the transpose command
index=oit_printer_monitoring AND type=Printer
| eval timeConvDate=strftime(_time,"%a %m-%d-%Y")
| eval timeConvTime=strftime(_time,"%H:%M:%S")
| table printer, status, timeConvDate, timeConvTime
| dedup printer
Here is my dashboard After using the transpose command.
.
index=oit_printer_monitoring AND type=Printer
| eval timeConvDate=strftime(_time,"%a %m-%d-%Y")
| eval timeConvTime=strftime(_time,"%H:%M:%S")
| table printer, status, timeConvDate, timeConvTime
| dedup printer
| transpose 0
Here is my colorPalette for both.
<format type="color" field="status">
<colorPalette type="map">{"toner low":#EC9960,"normal":#4FA484}</colorPalette>
</format>
1) How do I make those cells colored pre-transpose remain post-transpose?
2) In the post-transpose dashboard, how would I color the entire column? Printer oix53 status=normal; therefore, oix53 should have a green background. As should Tue 03-03-2020 and 15:28:31. Whereas printer oix58 status=toner low; therefore, oix58, Tue 03-03-2020 and 15:28:31 should have an orange background.
UPDATE
Another issue with using transpose.
It appears that field names either no longer exist; or, there are renamed (columns to rows?) and I cannot find the correct ones. I think figuring out the new(?) field names will resolve the above issue, as well as the new issue below.
Meanwhile, here is the new issue with transpose.
Using this drill down code in the post transpose works. However, it does not work in the post transpose code. Why?
<drilldown>
<link target="_blank">/app/search/printertest2?form.printer=$row.printer$</link>
</drilldown>
Thanks and God bless,
Genesius