Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

First transpose. Then colorPalette.

$
0
0
Hello, Here is my dashboard before using the transpose command ![preTranspose][1] index=oit_printer_monitoring AND type=Printer | eval timeConvDate=strftime(_time,"%a %m-%d-%Y") | eval timeConvTime=strftime(_time,"%H:%M:%S") | table printer, status, timeConvDate, timeConvTime | dedup printer Here is my dashboard After using the transpose command. ![postTranspose][2]. index=oit_printer_monitoring AND type=Printer | eval timeConvDate=strftime(_time,"%a %m-%d-%Y") | eval timeConvTime=strftime(_time,"%H:%M:%S") | table printer, status, timeConvDate, timeConvTime | dedup printer | transpose 0 Here is my colorPalette for both. {"toner low":#EC9960,"normal":#4FA484} 1) How do I make those cells colored pre-transpose remain post-transpose? 2) In the post-transpose dashboard, how would I color the entire column? Printer **oix53** status=***normal***; therefore, **oix53** should have a green background. As should **Tue 03-03-2020** and **15:28:31**. Whereas printer **oix58** status=***toner low***; therefore, **oix58**, **Tue 03-03-2020** and **15:28:31** should have an orange background. Thanks and God bless, Genesius [1]: /storage/temp/284643-screenshot-3-3-2020-4-25-31-pm.png [2]: /storage/temp/284644-screenshot-3-3-2020-4-27-18-pm.png

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>