Dashboards & Visualizations

How to achieve color with negative values and positive values in dashboard studio?

anissabnk
Path Finder

Hello everyone, 

I have a question with dashboard studio, in JSON format.

I made this dashboard and I want a specific color for the "diff" field. 

When diff is <0 : red color

when diff is > 0 : green color 

anissabnk_0-1674227093677.png

My spl request is :

`easyVista` source="incidents_jour"
| dedup "N° d'Incident"
|rename "Statut de l'incident" as statut
|eval STATUT=case( match(statut,"Résolu"),"fermé",
match(statut,"Clôturé"),"fermé",
match(statut,"Annulé"),"fermé",
match(statut,"Archivé"),"fermé",
match(statut,"A prendre en compte"),"ouvert",
match(statut,"Suspendu"),"ouvert",
match(statut,"En cours"),"ouvert",
match(statut,"Escaladé"),"ouvert")
|timechart count by STATUT usenull=f | eval diff=fermé-ouvert

Can you help me please ?

Thanks

 

Labels (1)
0 Karma

fredclown
Builder

Unfortunately, I don't see anything in the definition for column charts that allows you to dynamically change the color. You can set static colors in the source editor with this syntax ...

"my_chart": {
	"type": "splunk.column",
	"dataSources": {
		"primary": "my_ds"
	},
	"options": {
		"seriesColorsByField": {
			"diff": "#FF0000",
			"fermé": "#00FF00",
			"ouvert": "#0000FF"
		}
	}
}
0 Karma

anissabnk
Path Finder

Yes, that is the probleme. I want that the value change dynamically. 

I didn't find something to do this.

0 Karma

fredclown
Builder

Yeah, unfortunately without getting into scripting it doesn't look like you can dynamically change the colors via configuration.

Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...