About AdrianH

AdrianH · ‎11-09-2021

Hi. I've been trying to figure this out for a while now but no luck. Maybe someone has done and/or seen something similar? datetime cust prod 1:00 PM A 100 1:00 PM A 200 1:00 PM A 300 1:00 PM B 100 1:00 PM C 100 2:00 PM A 100 2:00 PM A 200 2:00 PM A 300 3:00 PM D 200 The above is an example of my splunk data source. First item i had to count where the distinct users. I did that. But I also have to create single value charts for the following combination counts: Distinct Count of CUST where PROD = 100 Distinct Count of CUST where PROD = 200 Distinct Count of CUST where PROD = 300 Again, these wasn't hard. I just added a where statement at the top of the Splunk query: But here's where I'm stuck. I also need to create some dashboard single count charts that would have this type of combinations of the PROD categories: Distinct Count of CUST where PROD = 100 & PROD = 200 Distinct Count of CUST where PROD = 100 & PROD = 300 Distinct Count of CUST where PROD = 200 & PROD = 300 I've tried using mvcombine then trying to create a filter to find the above combinations, but after several hours & googling, no luck. Thanks in advance!!

AdrianH · ‎08-02-2021

This worked! I have seen the mv referenced on other posts trying to do this same thing but it never made sense. But after reading your post here + reading more about mvs in splunk, it made a bit more sense. Plus several tries! I've used Tableau for years, so trying to setup this conditional formatting is much easier to do than Splunk. I like Splunk but there is definitely a learning curve. Thank you again!

AdrianH · ‎08-02-2021

Hi. Wondering if someone has found a similar solution? I don't have admin rights so I don't have the ability to load js/css files to the splunk server so it all has to be within local XML code. Here's a simple breakdown of what I'd like my table on the dashboard to do: query | table A, B, C, D, E When column A has the string value of "problem" I want to highlight the background of column B to red otherwise Column A remains default background color. And I need to hide column A from the end user. I found many posts (including the 2 below) but after a couple of days, no luck in finding the correct logic.. https://community.splunk.com/t5/Dashboards-Visualizations/How-do-you-highlight-a-table-cell-based-on-a-field-of-the-search/m-p/455645 https://docs.splunk.com/Documentation/Splunk/latest/Viz/TableFormatsXML#Color_palette_types_and_options Thanks in advance!

AdrianH · ‎07-24-2021

That worked!! Thank you very much, sir!

AdrianH · ‎07-24-2021

I've been playing around with this since last night but no luck. The concept of event handling is making more sense based on your suggestion + reading more about them last night. But I'm still not able to get this working. And I'm guessing it's because I need a condition tag? So Instead of this in the <search>: <done> <set token="backgroundcolour">green</set> </done> To set the background to red if value > 80, else default to green, then maybe something like this added to the search tag? <done> <condition match="result.AvgMemUsed>80"> <set token="backgroundcolour">red</set> </condition> <condition> <set token="backgroundcolour">green</set> </condition> </done> Where the 2nd condition (if i'm understanding the syntax is right) is the default if the other condition is not true. I've been trying the 2nd solution (as well as many other things) but no luck so far. thanks!!

AdrianH · ‎07-23-2021

Hi. First, I've been using this forum for a few months now as I'm new to Splunk. Thanks to all the contributors on here!! So here's what I'm trying to figure out. I have a dashboard with 3 line charts. Each line chart is in it's own unique panel (each panel has it's own unique Id). I'd like to change the panel background when a returned query value is above a certain number but green when below that number. This is the sample code I'm using to hardcode the 3 panels to either red or green. <row> <panel> <html> <style> #A .dashboard-panel { background: #5AAF71 !important; } #B .dashboard-panel { background: #E35033 !important; } #C .dashboard-panel { background: #5AAF71 !important; } </style> </html> </panel> </row> But I'm looking for a way to dynamically change the panel background colors based on the query returning value. Also, I am not an admin and we don't have permissions to load javascript / CSS files so all of my coding will have to be set into the Dashboard XML. I have used the range before to change colors in the Singles. Just not sure if it's possible with a panel background that the line chart sits in. thanks in advance!

Posts	6
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎07-23-2021

Online Status	Offline
Date Last Visited	‎11-11-2021 08:56 AM

Searching across multivalues

Highlight Table cell without Javascript

Dynamically Change panel background color based on...

Searching across multivalues

Re: Highlight Table cell without Javascript

Highlight Table cell without Javascript

Re: Dynamically Change panel background color base...

Re: Dynamically Change panel background color base...

Dynamically Change panel background color based on...