Dashboards & Visualizations

How do I create Punchcard that sorts bins with color?

splunkman
Engager

Im trying to make a punchcard to visualize incoming issues per hour in the prvious week.
This is the result i get with the following code: 

 

 

 

| eval issues="Issue Priority"
| stats count(issues) by date_hour date_wday

 

 

 

splunk1.png
splunk2.png

I really want to get more bins like on the right side so that i can assign values with color. E.g. 0<10 = green, 11<70 = yellow, 71<150=red. 

Something i need to include?

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

I haven't used that viz before but it looks like (from the documentation) that you just need to eval another field

| eval issues="Issue Priority"
| stats count(issues) as count by date_hour date_wday
| eval range=case(count < 11, "Green", count < 70, "Yellow", count < 150, "Red")

View solution in original post

splunkman
Engager

Thank you!
It worked with the Categorical color mode.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

I haven't used that viz before but it looks like (from the documentation) that you just need to eval another field

| eval issues="Issue Priority"
| stats count(issues) as count by date_hour date_wday
| eval range=case(count < 11, "Green", count < 70, "Yellow", count < 150, "Red")
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...