The following previous splunk thread works fine: https://community.splunk.com/t5/Archive/Insert-sign-for-each-result-in-a-specific-column/m-p/149167 | eval sensor = sensor + " %" 51% However,  if the field name has a space, it does not work: | eval "System Outlook" = "System Outlook" + " %" System Outlook %   I'm assuming it needs some sort of backslash escaping? (I've tried a bunch of ways). I know I can just rename it without the space, but I want to keep the space. Any ideas? ... View more

Hi! 😃 First Question - I'm having a little trouble with my XML that is trying to color a field based on value and blank value. I have a field called "Status" that has a date in this format "3/24/2020" and if it doesn't have a date, it's blank.  If the field has a date the field will be green, if the field is blank it will be colored grey. My current XML is as follows: <format type="color" field="Status"> <colorPalette type="expression">if (like(value,""),"#00b33c","#A9A9A9")</colorPalette>   The above XML half works, it colors in the fields with dates Green, but the fields that are blank it leaves white as normal and doesn't give the grey color.  Any ideas how to solve this with simple XML?   Second Question - Is it possible to color a specific cell a color using simple XML? ... View more

I have a search that does the following:   | inputlookup system_scores.csv | search "big search goes here" | fields server_org both_server_desktop_score desktop_score server_score   The search gives me the my custom score for each org and the score for each type of machine (which is what I expect from the search): server_org    both_server_desktop_score     desktop_score        server_score Bob                        60                                                       10                                     40 Alice                      40                                                       10                                     30 Jill                           10                                                        5                                        5 However, I would like to get each column into a row for each of the scores/type of device. My envision the search would look like this: server_org                        server_type                                                         Score Bob                                        both_server_desktop_score                       60 Bob                                        desktop_score                                                  10 Bob                                        server_score                                                      40          Alice                                      both_server_desktop_score                      40 Alice                                      desktop_score                                                  10          Alice                                      server_score                                                      30 Jill                                           both_server_desktop_score                      10 Jill                                           desktop_score                                                   5 Jill                                           server_score                                                       5 Is this possible?  Any ideas? ... View more

    | inputlookup system_trending.csv | search system = "bob" |table date “System Score) | fieldformat date = strftime(date, "%m/%d/%Y")   The above search creates the following statistics table for a selected system named “Bob”:   date Score 05/20/2020 10 06/20/2020 12 07/20/2020 10 08/20/2020 20   How do I make this into a single value panel with spark and trend line? If I just select the single value panel from the visualizations it just shows the date of “05/20/2020.”  If I use "| timechart max(date)"  I get 0 results.  Any ideas?  😀 Thanks! ... View more

I have a CSV that looks like the following:  Organization System  Scan Due  Date   ABC Jack 7-Feb-21   ABC Jill 9-May-20   123 Bob Unspecified   123 Alice Unspecified   456 James 10-Jan-21   How do I do a count of the " Scan Due Date Field" that shows all of the events that are Overdue, Not Expired, and Unspecified? ( I want to eventually want to put the results of that search into a pie chart.  Any help is appreciated!  ... View more

Hi! I have a drop-down menu that has 3 static options, "Server," "Non-Server," and "All."    How do I hide a panel if a user selects "Server" or "Non-Server"?   ... View more