Advanced Splunk by Ashish Kumar Tulsiram Yadav

Author:Ashish Kumar Tulsiram Yadav [Yadav, Ashish Kumar Tulsiram]
Language: eng
Format: azw3, epub, pdf
Publisher: Packt Publishing
Published: 2016-06-13T04:00:00+00:00

The output of the preceding code is as follows:

Along with bar-style Sparkline, a color map can be used by adding the following code:

<option name="colorMap"> <option name="2000:">#5379AF</option> <option name=":1999">#9ac23c</option> </option

Tables – An icon set

The table element provides us with the functionality of showing icons on the basis of the range of the values of the fields. Let's take an example to better understand the use of an icon set in a tabular output. Suppose the output of a search query results in a few values, and the user is interested in categorizing those values in a range where if the value is between 0-100, then it can be tagged as good, if it is in the range of 100-200, then moderate/average, and if it is above 200, then it is severe. Then, the rangemap command can be used to categorize the values in the output in the required categories. To make the categorization more visual, icons can be added, for example, the good ones are marked with a green tick mark, the moderate ones with an orange triangle, and the severe ones with a red circle. Similarly, depending on the need and categorization, different icons can be used to visualize data in a more reader-friendly style.

Splunk provides users with the functionality of adding custom CSS (Cascading Style Sheet) and JS (JavaScript) to add such customizations in the output result. Now, we will see how we can get such customization in a table element.

The following is the search query used to explain how an icon set is added to a table element:

index=* | chart count by sourcetype | rangemap field=count low=0-100 elevated=101-1000 default=severe

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.