Refine your search:

Is there a way to highlight an entire row in a SimpleResultsTable based on the value of a single cell in that row?

Or to highlight one field in the row based on the value of another field?

I'm looking for something like the typical cell-based heatmap, but applied to the entire event, e.g., to highlight high-severity events.

asked 10 Sep '10, 22:29

southeringtonp's gravatar image

southeringtonp ♦
4.5k1215
accept rate: 35%

edited 12 Sep '10, 16:19

Yeah, I would like to see an option to have heatmap colors relative to the values present in a single column, rather than over all numeric values in a table.

(12 Sep '10, 16:47) gkanapathy ♦

e.g., if I have columns in a single table that are of widely vary magnitude across columns (but not within a column), the heatmap is much less useful.

(12 Sep '10, 16:48) gkanapathy ♦

What I had in mind was more for comparison against an absolute, pre-defined threshold, but even using the existing heatmap functionality would be a plus.

(26 Sep '10, 15:27) southeringtonp ♦

2 Answers:

See here for a start:

http://splunk-base.splunk.com/answers/13012/does-42-have-any-capabilities-to-set-a-row-color-based-on-a-field-example?page=1#22445

link

answered 15 Apr '11, 08:44

araitz's gravatar image

araitz ♦♦
7.2k2516
accept rate: 38%

I had the same problem, so instead of relying on a SimpleResultsTable, i used the SingleValue module + the stats count command with a rangemap applied to it.

link

answered 06 Feb '11, 21:28

Joetron's gravatar image

Joetron
75314
accept rate: 20%

Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×117
×39
×36

Asked: 10 Sep '10, 22:29

Seen: 1,080 times

Last updated: 15 Apr '11, 08:44

Copyright © 2005-2012 Splunk, Inc. All rights reserved.