Splunk Search

How can I define column colors for a combination of fields?

Jaff
New Member

I need to colorize all the columns of a table, except the sole field whose name I know. Due to the large indeterminate collection of data combinations I am examining, I cannot know what names the fields which will be displayed can be. I need to have the first column NOT be colorized, but all the other columns SHOULD be colorized:

<format type="color" field="container">
  <scale type="linear"></scale>
  <colorPalette type="list">[#FFFFFF,#FFFFFF]</colorPalette>
</format>
<format type="color">
  <colorPalette type="sharedList"></colorPalette>
  <scale type="sharedCategory"></scale>
</format>

Unfortunately, the above results in ALL columns being colorized.

0 Karma

Jaff
New Member

Answer was to change the scale to "category" since field contained non-numeric data. Also, alternated colors in palette:

<format type="color" field="container">
  <scale type="category"></scale>
  <colorPalette type="list">[#FFFFFF,#DCDCDC]</colorPalette>
</format>
0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...