Dashboards & Visualizations

How to make Status Indicator visualization display server name and change color based on count?

Ashwini008
Builder

Hi,

Ashwini008_0-1672068190943.png

In place of count I want to show the server name, And change color based on condition if count is >250.

I referred many links and docs but could not achieve what I wanted 

index = webss
sourcetype = webphesst earliest= -1d latest=now
| where HTTP=500
| stats count by host
| eval color=if(count>=250, "#dc4e41", "#65a637"), icon=if(count>=250, "times-circle", "check-circle")
Labels (2)
0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...