Hello, I am generating the following table in splunk dashboard using the following query from raw data file: Two types of values each Process status can have Process Name Process Status VM_NAME Process oracle cm server "vm1 " "Process1" "0" "0" "0" VM_NAME Process oracle cm server "vm2 " "Process1" "43" "1" "2" index="log" source="/var/tmp/logs/test.log" | rex max_match=0 (?s)(?<vm>.*?); | mvexpand vm | rex field=vm max_match=0 (?<name>\S+?):?\s(?<value>.*) | rex mode=sed field=value s/(.*)/\"\1\"/g | eval tmp=mvzip(name,value,"=") | rename tmp as _raw | kv | table name value | rename name as "Process Name" | rename value as "Process Status" Now, I want to color code the values of this table as red/green on the basis of if the running processes are zero or not. I don't want anything complex just a simple color coding would work. Please suggest. Thanks in advance
... View more