my search string is
sourcetype=health | head 1 | rangemap field=status default=severe elevated=2-2 low=1-1 | eval field=if(status==1 OR status==2, "Connected", "Not Connected")
and
sourcetype="log" pid_status earliest="-30s" latest=now | dedup host | head 3 | where pid_status="(Active)" | stats count | rangemap field=count low=2-2 default=severe | eval count=case(count == 0, "Not Running", count == 1, "Not Running", count == 2, "Active", count == 3, "Not Running")
above search works fine in version 4.3.3, build 128297 and I can see colored rectangle.
but when I deploy this in latest version of Splunk - I can't see any colored rectangle in anywhere my app. I am using rangemap in four different view.
is this bug or something wrong in my app?
I have also installed sideview_util app.
Thanks
Right, I think I've grabbed all the relevant bits. In an application.css in SPLUNK_HOME/etc/apps/APPNAMEOFYOURCHOICE/appserver/static put the following;
.SingleValueHolder {
background-color: #CCCCCC;
background-image: url("/en-US/static/@128297/img/skins/default/overlay_gradient_50.png");
background-repeat: repeat-x;
border-radius: 4px 4px 4px 4px;
box-shadow: 0 0 5px rgba(0, 0, 0, 0.25) inset;
font-size: 14px;
font-weight: bold;
}
.SingleValue .severe {
background-color: #BB2121;
color: #FFFFFF;
}
.SingleValue .high {
background-color: #E67918;
color: #FFFFFF;
}
.SingleValue .elevated {
background-color: #E9DA34;
color: #000000;
}
.SingleValue .guarded {
background-color: #4DA6DF;
color: #FFFFFF;
}
.SingleValue .low {
background-color: #72C72D;
color: #FFFFFF;
}
.SingleValue .None {
background-color: #999999;
color: #FFFFFF;
}
.SingleValue .singleResult {
color: #FFFFFF !important;
font-size: 14px;
margin: 0px;
padding-left: 3px;
vertical-align:0px;
}
EDIT: Added CSS for singleResult, needed to override the new singleResult related CSS in v5
Right, I think I've grabbed all the relevant bits. In an application.css in SPLUNK_HOME/etc/apps/APPNAMEOFYOURCHOICE/appserver/static put the following;
.SingleValueHolder {
background-color: #CCCCCC;
background-image: url("/en-US/static/@128297/img/skins/default/overlay_gradient_50.png");
background-repeat: repeat-x;
border-radius: 4px 4px 4px 4px;
box-shadow: 0 0 5px rgba(0, 0, 0, 0.25) inset;
font-size: 14px;
font-weight: bold;
}
.SingleValue .severe {
background-color: #BB2121;
color: #FFFFFF;
}
.SingleValue .high {
background-color: #E67918;
color: #FFFFFF;
}
.SingleValue .elevated {
background-color: #E9DA34;
color: #000000;
}
.SingleValue .guarded {
background-color: #4DA6DF;
color: #FFFFFF;
}
.SingleValue .low {
background-color: #72C72D;
color: #FFFFFF;
}
.SingleValue .None {
background-color: #999999;
color: #FFFFFF;
}
.SingleValue .singleResult {
color: #FFFFFF !important;
font-size: 14px;
margin: 0px;
padding-left: 3px;
vertical-align:0px;
}
EDIT: Added CSS for singleResult, needed to override the new singleResult related CSS in v5
This change break my app. How to fix this or implement similar look & feel or any other alternate?
So how can you bring back the color boxes again?
In Splunk 5.0, the visualization for a Single Panel has changed. Now the color will show up as text of a different color, rather than a background of a different color. Is this what you are seeing?