This helped a lot! thank you!! ... View more

Hi, check out this link please https://docs.splunk.com/Documentation/Splunk/8.0.1/ReleaseNotes/FixDatetimexml2020 ... View more

` sourcetype=prod source=*peek.log config_section_stats | stats latest(_time) as latest_log_time, latest(model_time) as latest_model_time by case, source, hostname | convert ctime(latest_log_time) | stats dc(case) as NUM_LINES -15m now none none 0 ["0x006d9c","0x006d9c","0xffffff","0xffffff","0xffffff"] [0,50,70,100] progressbar 1 ` The range colors and the range values does that, this one will keep 0 - 50 blue and above that white. this should work, but if it doesn't let me know please ... View more