Dashboards & Visualizations

Event type colors not shown in Dashboards

cemiam
Path Finder

I have created an event type and set a color for it. Events colored in search app and reports however they are not shown in the Dashboards. I have save it as both Inline Search and Report however issue is still the same. Do you have any suggestion to colorized Dashboard Panels?

Best Regards,
Cem

Tags (1)
0 Karma
1 Solution

cmerriman
Super Champion

add |fields eventtype to the end your search in the dashboard

View solution in original post

cmerriman
Super Champion

add |fields eventtype to the end your search in the dashboard

cemiam
Path Finder

Hi,

Soon I can see the colored events 🙂 Thanks for your assitance.

All the best,
Cem

0 Karma

cemiam
Path Finder

I am trying coloring dashboards panel using eventtypes like in the article below.

http://docs.splunk.com/Documentation/Splunk/6.5.1/Knowledge/Defineeventtypes

I have added the screenshots. As you can see events are colored in the search app and reports. However it is not worked with Dashboard Panels.

Dashboard: http://imgur.com/a/iJuCS
Report: http://imgur.com/a/Q2jKa
Search Events: http://imgur.com/a/osQSV

Best Regards,
Cem

0 Karma

cmerriman
Super Champion

can you share some syntax of what you're displaying in the dashboard? coloring eventtypes i believe only shows when viewing raw events. If you just want to highlight certain text, in 6.5, you can use table formatting to highlight values.

http://docs.splunk.com/Documentation/Splunk/6.5.1/Knowledge/Defineeventtypes
http://docs.splunk.com/Documentation/Splunk/6.5.1/Viz/TableFormatsFormatting#Column_color

0 Karma

cemiam
Path Finder

I am trying coloring dashboards panel using eventtypes like in the article below.

http://docs.splunk.com/Documentation/Splunk/6.5.1/Knowledge/Defineeventtypes

I have added the screenshots. As you can see events are colored in the search app and reports. However it is not worked with Dashboard Panels.

Dashboard: http://imgur.com/a/iJuCS
Report: http://imgur.com/a/Q2jKa
Search Events: http://imgur.com/a/osQSV

Best Regards,
Cem

0 Karma

maffreitas
Path Finder

Let me know if you talking about this:

http://docs.splunk.com/Documentation/Splunk/6.5.2/Viz/BuildandeditdashboardswithSimplifiedXML#Specif...

If not, please share with us more details or some code/images.

Regards.

0 Karma
Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...