Splunk Search

How to set the threshold value for each value in the Field?

vvemula
Path Finder

I have results in the table, As shown the below:

Name               Time            Settingname               value 
OEK                09-16-2019      PWD.length                8
ELC                09-16-2019      timeout                   400
CMG                09-16-2019      PWmaxAttemts              3

--> I need Eval function ( for PWD.length, value is 😎 , whole row should be green. if other than value 8, whole row is Red
--> For the timeout ( for timeout, value is 400), whole row should be green. if other than value 400, whole row is Red

No Javascript or CSS.
Can someone please help me here?

Thanks in Advance.

0 Karma

vvemula
Path Finder

Thank you @jacobevans,

I have figured new way to resolve the issue.

--> I have created the lookup file with threshold value based on setting name
--> output lookup matched with setting name getting the threshold value
--> then I have matched the value vs Threshold value, and getting the value red or green in status column.

Thank you.

0 Karma

jacobpevans
Motivator

Greetings @vvemula,

Unfortunately, you need to use JS to accomplish this. Luckily, it's already been done for you in this app - you just need to copy and paste the relevant JS and CSS.

https://splunkbase.splunk.com/app/1603/

Cheers,
Jacob

If you feel this response answered your question, please do not forget to mark it as such. If it did not, but you do have the answer, feel free to answer your own post and accept that as the answer.
0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...