Dashboards & Visualizations

How do I create Punchcard that sorts bins with color?

splunkman
Engager

Im trying to make a punchcard to visualize incoming issues per hour in the prvious week.
This is the result i get with the following code: 

 

 

 

| eval issues="Issue Priority"
| stats count(issues) by date_hour date_wday

 

 

 

splunk1.png
splunk2.png

I really want to get more bins like on the right side so that i can assign values with color. E.g. 0<10 = green, 11<70 = yellow, 71<150=red. 

Something i need to include?

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

I haven't used that viz before but it looks like (from the documentation) that you just need to eval another field

| eval issues="Issue Priority"
| stats count(issues) as count by date_hour date_wday
| eval range=case(count < 11, "Green", count < 70, "Yellow", count < 150, "Red")

View solution in original post

splunkman
Engager

Thank you!
It worked with the Categorical color mode.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

I haven't used that viz before but it looks like (from the documentation) that you just need to eval another field

| eval issues="Issue Priority"
| stats count(issues) as count by date_hour date_wday
| eval range=case(count < 11, "Green", count < 70, "Yellow", count < 150, "Red")
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...