Splunk Search

Feature request: enhance mapping.choropleth functionality?

aaron_sakovich
Path Finder

Currently, choropleth maps have an annoying feature where if you're using sequential coloring of geometries, the minimum color is always white (0xFFFFFF) and whatever is specified in the source for .minimumColor is ignored. Divergent coloring allows you to specify a .minimumColor, but it still routes the midpoint through white. On maps either without colorful tiles specified or with white backgrounds, having a white color for your data makes the visualization difficult, to say the least.

Would it be possible to change the functionality of mapping.choroplethLayer.colorMode and .minimumColor such that when in sequential mode, the minimum color can be specified, as shown in the following example?

<option name="mapping.choroplethLayer.colorMode">sequential</option>
<option name="mapping.choroplethLayer.maximumColor">0x0000FF</option>
<option name="mapping.choroplethLayer.minimumColor">0x00FF00</option>

(Bonus points, it would be nice if there were a mapping.choroplethLayer.middleColor for divergent coloring.)

There are lots of cases documented here in Answers of people who would be able to benefit from this functionality, and some where people have had to resort to kludges to work around the lack of this feature.

(Ref: https://docs.splunk.com/Documentation/Splunk/7.3.2/Viz/PanelreferenceforSimplifiedXML#map)

woodcock
Esteemed Legend

Splunk has a new portal for feature/enhancement requests:
https://ideas.splunk.com

0 Karma

richgalloway
SplunkTrust
SplunkTrust

@aaron_sakovich Consider submitting this feature request at https://ideas.splunk.com/

---
If this reply helps you, Karma would be appreciated.
0 Karma

aaron_sakovich
Path Finder
0 Karma

woodcock
Esteemed Legend

Open a P0 support case; these are treated as Enhancement Requests by Splunk.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...