I have a dashboard panel with a simple query, which gives top 20 values of the event. For example, I am searching for number of customers of top 20 countries of my product. As expected each country comes up with a unique value. Hence I need each cauntry should be given a unique color in the bar chart of a dashboard while each bar represents a unique country. Please suggest. Thanks!
Hi
Check this
<dashboard>
<label>chart color</label>
<row>
<panel>
<chart>
<search>
<query>index=_internal |top limit=5 sourcetype
| transpose 0 header_field=sourcetype|search column=count</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="charting.chart">bar</option>
<option name="charting.drilldown">none</option>
<option name="charting.seriesColors">[0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440]</option>
<option name="refresh.display">progressbar</option>
</chart>
</panel>
</row>
</dashboard>
Hi
Check this
<dashboard>
<label>chart color</label>
<row>
<panel>
<chart>
<search>
<query>index=_internal |top limit=5 sourcetype
| transpose 0 header_field=sourcetype|search column=count</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="charting.chart">bar</option>
<option name="charting.drilldown">none</option>
<option name="charting.seriesColors">[0x1e93c6, 0xf2b827, 0xd6563c, 0x6a5c9e, 0x31a35f, 0xed8440]</option>
<option name="refresh.display">progressbar</option>
</chart>
</panel>
</row>
</dashboard>
vnravikumar, thanks! That worked for me. Can you please let me know the logic behind naming convention of colors?
This answer allows you to pick the color pallet but Splunk assigns the colors as it chooses. If you need to map certain colors to certain values, then this is not the right way to do it; see my answer for the correct method.
You need the charting.fieldColors
setting:
https://docs.splunk.com/Documentation/Splunk/latest/Viz/ChartConfigurationReference