This is a continuation of:
(https://answers.splunk.com/answers/804476/compare-the-actual-start-time-to-the-expect-start.html)
I have created a dashboard that compares the Actual Start Time with...
See more...
This is a continuation of:
(https://answers.splunk.com/answers/804476/compare-the-actual-start-time-to-the-expect-start.html)
I have created a dashboard that compares the Actual Start Time with the Expected Start Time of a given job. In this dashboard, I would like these highlight conditions to be in effect:
job ran on-time (Act. <= Exp.) = highlight green
job has not ran yet = highlight yellow
job ran late (Act. > Exp.) = highlight red
I would like each row (each job name) highlighted based on these conditions.
Here is the code for my current Dashboard:
<dashboard>
<label>Name</label>
<row>
<panel>
<title>Title</title>
<table>
<title>Title</title>
<search>
<query>msg.jobName = RLMMTP* | spath "msg.status.Code" | search "msg.status.Code"=*| spath "msg.recordType" | search "msg.Type"=* | spath "msg.message" | search "msg.message"="RECORD PROCESSED"
| eval day = strftime(_time, "%d")
| stats earliest(timestamp) as startTime, latest(timestamp) as endTime count by msg.jobName
| eval startTime=substr(startTime,1,13)
| eval ActualStart=strftime(startTime/1000, "%H:%M:%S")
| lookup AverageStartTimes.csv msg.jobName as msg.jobName OUTPUT ExpectedStart
| table msg.jobName</query>
<earliest>-1d@d</earliest>
<latest>@d</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
<format type="color" field="msg.jobName">
<colorPalette type="expression">
if ( ActualStart >= ExpectedStart, "#65A637")
if ( ActualStart < ExpectedStart, "#8B0000")
</colorPalette>
</format>
</table>
</panel>
</row>
</dashboard>
Upon trying with just simple XML in the Dashboard, it seems I cannot create a condition to highlight only one row at a time, only the whole column. Unfortunately using JS and CSS is currently unavailable for me. Any help is appreciated.