Hello, I am creating a dashboard (Simple XML) with a table panel as shown below: This is actually a dashboard for Telephony System and number of columns (and names, of course) will be changed based on which agents are logged in at a time. For example, at 9 AM: Queue, Agent 1, Agent 4, Agent 9 at 3 PM: Queue, Agent 1, Agent 4, Agent 5, Agent 11 at 1 AM: Queue, Agent 5, Agent 9, Agent 11 Now, in this table panel, I want to replace 1 with Green Tick and 0 with Red Cross in all the columns. Can you please suggest how this can be achieved? I have tried this using eval and replace but as columns are dynamic, I am unable to handle this. Thank you. Edit: Sample JSON Event: {
AAAA_PMC_DT: 05-Dec-2023 13:04:34
Agent: Agent 1
Block: RTAgentsLoggedIn
Bound: in
Queue(s):: Queue 1, Queue 3, Queue 4, Queue 5, Queue 7, Queue 10
} SPL: index="telephony_test" Bound=in Block=RTAgentsLoggedIn _index_earliest=-5m@m _index_latest=@s
| spath "Agent"
| spath "Queue(s):"
| spath "On pause"
| spath AAAA_PMC_DT
| fields "Agent" "Queue(s):" "On pause" AAAA_PMC_DT
| rename "Queue(s):" as Queue, "On pause" as OnPause, AAAA_PMC_DT as LastDataFetch
| eval _time=strptime(LastDataFetch,"%d-%b-%Y %H:%M:%S")
| where _time>=relative_time(now(),"-300s@s")
| where NOT LIKE(Queue,"%Outbound%")
| sort 0 -_time Agent
| dedup Agent
| eval Queue=split(Queue,", ")
| table Agent Queue
| mvexpand Queue
| chart limit=0 count by Queue Agent
... View more