Dashboards & Visualizations

How to get my single value rangemap to work, include today's date after the single value, and increase the font size?

jgpshntap
Explorer

For some reason i'm missing something. I added a single-panel dashboard with a rangemap command, but the value just shows in black.

Here's the end of my search

|stats count(Lag_Exists) as Lag |  rangemap field=Lag Red=1-1000

Also, if I want to put today's date in after the single value, what is the best way to do that as well as increasing the size of the font?

Thanks in advance

0 Karma

aalanisr26
Path Finder

Try This: use "range"

   <single>
        <search>
          <query>index = main mysearchcriteria|stats count by host |  rangemap field=count low=0-10 high=50-96 default=severe</query>
          <earliest>-24h</earliest>
        </search>
        <option name="field">host</option>
        <option name="classField">range</option>
      </single>
0 Karma

jgpshntap
Explorer

I tried that earlier and again just now.. That doesn't work...

single>
Snapvault Lag

Sanitized | rangemap field=Lag Red=1-1000
@d
now

Snapvault Relationships in Lag
search
none
range
Lag
range

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...