Dashboards & Visualizations

How to make ranges (from predict command) initially highlighted? (a.k.a. gain focus upon loading)

kaylahood
New Member

Timechart with predictions shown in desaturated colors
Timechart with predictions shown in normally saturated colors

I have created a timechart visualization using a single predict command and several eval commands to produce several faux predict-style ranges.
I'll briefly describe my technique so that those who are unfamiliar can understand what I'm doing (it's a bit hackish).

First, I have at least three fields which represent some set of values over time. These three fields should represent a "lower" range boundary (let's call this lower), some value for the "middle" of the range ( middle ), and a value for the "upper" range boundary ( upper ), though the visualization will still produce... something... if the values are not correctly oriented (this, I'm pretty sure, would be an unintended use case).

You'll use evalto trick Splunk's timechart visualization module into believing your three fields are the result of a predict command.
eval _lower=lower, _predicted=middle, _upper=upper

If you want to make more than one of these, you can add numbers to the end of each internal field name (starting with 2).
eval _lower2=lower2, _predicted2=middle2, _upper=upper2 (assuming you have three fields lower2, middle2, and upper2)

Now, my question is:
How can I force my timecharts to never show "dull" or "unsaturated" colors for my predicted ranges? The first picture above shows my timechart when it first loads. The second shows it after I've hovered my mouse over any of the ranges on the timechart and then moved my mouse away.

I want the colors to start out vibrant and stay that way. Is there anything I can do, other than make some CSS hacks to target the visualization, to make the colors show up how I want them?

0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...