Hello, I apologize if this is not in the correct location.
Basically, in order to simplify things, let's say I have a dashboard with 2 panels doing 2 seperate search queries.
Both are a "| stats count" and they both return values.
What I want to do is change the color of the value of Panel A based on the result of Panel B, and if for example the value of Panel B is 50% larger or smaller than Panel A, then the value of Panel A should turn yellow.
But I don't know how to turn the value of a panel into a variable or a token and use that variable or token to create a range based on a % of that value. Is this possible?
I did some research in splunk doccumentation and I thought I found a way to make it work but I don't know if it works because I'm not able to get it working.
Basically I tried doing <set token="result_token">$job.resultCount$</set> which in my mind would use the result count of the panel and convert that result into the "result_token" and then I would be able to use that "result_token" to do something like
<option name="drilldown">none</option> <option name="rangeColors">["yellow","purple"]</option> <option name="rangeValues"> "result_token" > 50% = yellow</option> <option name="rangeValues"> "result_token" < 50% = yellow</option> <option name="refresh.display">progressbar</option> <option name="useColors">1</option>
I don't know if I made any sense.
... View more