Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to edit my search in order to assign colors to single value text?

$
0
0
I have this search that I'm trying to use in a single value panel: index=network sourcetype=juniper host=RouterA AND ospf_interface="ge-0/0/0.0" | RPD_OSPF_NBR* "Full to Down" | dedup ospf_interface | stats count as counterdown | eval status = if (counterdown = "1","Impacted", if (counterdown = "2","Down", "OK")) | table status My single value panel is showing the statuses correctly (OK, Impacted, Down) but are not coloring them (because I assume the color ranges only work on numerical values). Is there any way to make this work for text results?

Viewing all articles
Browse latest Browse all 47296

Trending Articles