Dashboards & Visualizations

How can we change the color column chart?

LauraBre
Communicator

Hello,

I created a column chart and I want to associate one color to one value that my search can return. My search can return the number of value "YES" and "NO" that my field can take. This is my search:

source=tcp:5544 STAT_VE=YES OR STAT_VE=NO | chart count by PURCH_DAY,STAT_VE

I wan the number of "NO" appears in blue on my chart and the number of "YES" in green. This my xml file :




Number of Transactions
Time
Number of Transactions
column
stacked


{"No":0x3399CC, "Yes":0x00F66}

I tried this to associate a color but it doesn't work.

<option name="charting.fieldColors">{"No":0x3399CC, "Yes":0x00F66}</option>

Thanks by advance to your answer.

Laura

Tags (1)

lguinn2
Legend

You will have to "trick" Splunk into doing this. Splunk assigns colors to a data series, not a data value. So split your search results into multiple series and used "stacked" charts.

This answer has more detail: Change Bar Chart Color based on Data Value

Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...