Dashboards & Visualizations

How to change the default colors of 9.X back to 8.X. (9 is very bright)?

robertlynch2020
Motivator

Hi

We are about to upgrade to version 9.0.4 but we have noticed that version 9 colors are very bright.

Is there a way to use the 8. X colors. As we have many panels and all our end users are giving out that it is extremely bright and over time. I know I can change each panel, but we have so many at this stage, I am looking for a way to do it on the system level, please.

9.0.4 0 The colors look like this

robertlynch2020_0-1677596275806.png

The 8.1.0 is not so bright.

robertlynch2020_1-1677596550329.png

Any help would be great

Rob

 

 

Labels (1)

robertlynch2020
Motivator

Thanks for this - i will try it out - cheers

0 Karma

patng_nw
Communicator

I have the same question.  The new color scheme is not easy on the eyes of our users.

0 Karma

tbaublys_splunk
Splunk Employee
Splunk Employee

There are two possible solutions: 
1) You can assign colours explicitly and case by case in the chart or table options, for example:

 

<option name="charting.fieldColors">{"COMPLETE":#358856,"CANCELED":#ED8440,"FAILED":#B90E0A,"PENDING":#7EA77B }</option>

 

for tables you could use 

 

<colorPalette type="map">{"ACCESSORIES":#6DB7C6,"ARCADE":#F7BC38,"STRATEGY":#AFEEEE}</colorPalette>

 

 

 


2) If you are admin, you could create your own ui-prefs.conf in $SPLUNK_HOME/etc/system/local with following content and restart Splunk  

 

[default]
display.visualizations.charting.seriesColors = [0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440, 0x3863a0, 0xa2cc3e, 0xcc5068, 0x73427f, 0x11a88b, 0xea9600, 0x0e776d, 0xffb380, 0xaa3977, 0x91af27, 0x4453aa, 0x99712b, 0x553577, 0x97bc71, 0xd35c2d, 0x314d5b, 0x99962b, 0x844539, 0x00b290, 0xe2c188, 0xa34a41, 0x44416d, 0xe29847, 0x8c8910, 0x0b416d, 0x774772, 0x3d9988, 0xbdbd5e, 0x5f7396, 0x844539]

 

This would change default colours back to the old defaults of 8.x - but  it only applies to the newly created charts using default colour scheme. It would also affect all users on the Search Head and require restart, so please test it before and use with caution. 

robertlynch2020
Motivator

HI

After trying this is does not work sorry - any other ideas?

 

Thanks

Robert

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...