Hi @stucky101 - you are correct that search tokens are a feature that were just recently added in 9.0, whenever you upgrade to 9.0 or any future releases of Splunk you'll definitely be able to use search tokens in the way you're describing!
... View more
Hi @triptraptresko ! If you were using the older viz.line type visualization, you would be correct about using the option fieldColors - however, you're using the newer splunk.line type, which uses an option called seriesColorsByField to accomplish the same thing. Try swapping the name of the options and it should work!
... View more
Glad to hear you got it working! For reference, you can also find the full list of options for bar charts in our documentation here: https://docs.splunk.com/Documentation/SplunkCloud/latest/DashStudio/chartsBar
... View more
Hi @yvassilyeva! You can use an overlay in a bar chart with the overlayFields option in the source code. Here's an example from our Examples Hub for a field named host8: {
"type": "splunk.column",
"options": {
"overlayFields": "host8"
},
"dataSources": {
"primary": "ds_search2"
},
"title": "Overlay",
"context": {}
}
... View more