Dashboards & Visualizations

How to make ranges (from predict command) initially highlighted? (a.k.a. gain focus upon loading)

kaylahood
New Member

Timechart with predictions shown in desaturated colors
Timechart with predictions shown in normally saturated colors

I have created a timechart visualization using a single predict command and several eval commands to produce several faux predict-style ranges.
I'll briefly describe my technique so that those who are unfamiliar can understand what I'm doing (it's a bit hackish).

First, I have at least three fields which represent some set of values over time. These three fields should represent a "lower" range boundary (let's call this lower), some value for the "middle" of the range ( middle ), and a value for the "upper" range boundary ( upper ), though the visualization will still produce... something... if the values are not correctly oriented (this, I'm pretty sure, would be an unintended use case).

You'll use evalto trick Splunk's timechart visualization module into believing your three fields are the result of a predict command.
eval _lower=lower, _predicted=middle, _upper=upper

If you want to make more than one of these, you can add numbers to the end of each internal field name (starting with 2).
eval _lower2=lower2, _predicted2=middle2, _upper=upper2 (assuming you have three fields lower2, middle2, and upper2)

Now, my question is:
How can I force my timecharts to never show "dull" or "unsaturated" colors for my predicted ranges? The first picture above shows my timechart when it first loads. The second shows it after I've hovered my mouse over any of the ranges on the timechart and then moved my mouse away.

I want the colors to start out vibrant and stay that way. Is there anything I can do, other than make some CSS hacks to target the visualization, to make the colors show up how I want them?

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...