Actually, now the GUI adds a way to do this, in later versions. Edit the dashboard, edit the search of the single panel you want to colorize to remove rangemap, so you're just presenting a numeric value. The right most menu, looks to me like a little pen, click that, and click on Colors. Turn Use Colors on and define your ranges and colors here. From the Simple XML editor, use this: <title>Total Transactions</title> <search base="perf2data"> <query>stats sum(TOTAL) as TOTAL</query> </search> <option name="drilldown">none</option> <option name="numberPrecision">0</option> <option name="rangeColors">["0x65a637","0xf7bc38","0xd93f3c"]</option> <option name="rangeValues">[7500000,10000000]</option> <option name="useColors">1</option> ... View more

Perf tip: don't use "table" to restrict your dataset to specific fields. Use "fields" instead. The table command is for presenting fields in a particular order, and can only be done by a search head, meaning everything afterwards must be done there too. The fields command is for removing certain fields or restricting the dataset to a certain list of fields. It works on indexers too. It's a small change in this particular case, but on big long scary searches, it can make a difference. ... View more

Well, there are two answers. One for splunk up to 6.5.2, which is the now deprecated classField option. For example: <code> <single> <title>LT Rate</title> <search base="perf2data"> <query>stats sum(TOTAL) as TOTAL, sum(LT) as LT | eval TX=round(100 * LT / TOTAL, 4) | fields TX | rangemap field=TX low=0-0.0499 elevated=0.0500-0.2499 default=severe | eval TX=tostring(TX) + "%"</query> </search> <option name="classField">range</option> <option name="drilldown">none</option> </single> </code> The rangemap command adds the range variable set to low, elevated or severe based on the value in TX, and classField says to use the range field to define the color of the single value text (green, yellow, red). I actually came here looking for the answer for v6.5.2 and later, because I need to update my dashboards before they break. I'll try to come back and update if I find an answer. ... View more