Hello @all, in collaboration with Splunk Support, we were able to work out the following workarounds for the general customization of the dashboard color scheme: Workaround for new and existing Classic Dashboards, as well as for Dashboard Studio Dashboards newly created from a Splunk search (save as...): Set parameter display.visualizations.charting.seriesColors in savedsearches.conf as follows: [default]
display.visualizations.charting.seriesColors = [0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440, 0x3863a0, 0xa2cc3e, 0xcc5068, 0x73427f, 0x11a88b, 0xea9600, 0x0e776d, 0xffb380, 0xaa3977, 0x91af27, 0x4453aa, 0x99712b, 0x553577, 0x97bc71, 0xd35c2d, 0x314d5b, 0x99962b, 0x844539, 0x00b290, 0xe2c188, 0xa34a41, 0x44416d, 0xe29847, 0x8c8910, 0x0b416d, 0x774772, 0x3d9988, 0xbdbd5e, 0x5f7396, 0x844539] Attention: Since this is an undocumented parameter, the following error is thrown in the btool check: Invalid key in stanza [default] in /opt/splunk/etc/system/local/savedsearches.conf, line 18: display.visualizations.charting.seriesColors (value: [0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440, 0x3863a0, 0xa2cc3e, 0xcc5068, 0x73427f, 0x11a88b, 0xea9600, 0x0e776d, 0xffb380, 0xaa3977, 0x91af27, 0x4453aa, 0x99712b, 0x553577, 0x97bc71, 0xd35c2d, 0x314d5b, 0x99962b, 0x844539, 0x00b290, 0xe2c188, 0xa34a41, 0x44416d, 0xe29847, 0x8c8910, 0x0b416d, 0x774772, 0x3d9988, 0xbdbd5e, 0x5f7396, 0x844539]). Workaround for existing Dashboard Studio dashboards as well as for Dashboard Studio dashboards newly created from "Create Dashboard": Edit Dashboard > Source > Insert seriesColors parameter as follows: "visualizations": {
…
"options": {
…
"seriesColors": "[0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440, 0x3863a0, 0xa2cc3e, 0xcc5068, 0x73427f, 0x11a88b, 0xea9600, 0x0e776d, 0xffb380, 0xaa3977, 0x91af27, 0x4453aa, 0x99712b, 0x553577, 0x97bc71, 0xd35c2d, 0x314d5b, 0x99962b, 0x844539, 0x00b290, 0xe2c188, 0xa34a41, 0x44416d, 0xe29847, 0x8c8910, 0x0b416d, 0x774772, 0x3d9988, 0xbdbd5e, 0x5f7396, 0x844539]"
}, Modification of ui-prefs.conf configuration file is not required in any of the cases. Best regards
... View more