Customize a single value
Learn how to configure single value visualization components.
Value ranges and colors
Colors can emphasize range values or trends in a single value visualization. In the Format menu, you can choose whether to use colors. If you opt to use colors, you can select whether to color by value or trend.
Note: For queries using
stats to aggregate results, only the color by value option is available.
You can also adjust the color mode to change whether colors appear in the foreground or background.
Depending on the color mode you choose, coloring a single value generated with
timechart by value means that the sparkline and trend indicator appear black (for foreground color) or white (for background color).
Color by value
Coloring by value is available for single value visualizations generated with either
timechart. Color by value means that the single numeric value in the visualization changes color based on the value the search generates and the range for that value. For example, if you map a value range from 30-50 to the color yellow, then a single value of 35 appears yellow.
You can adjust value ranges for the query to change how different results are visualized. By default, there are five ranges and colors for coloring by value. You can add or remove ranges, modify the values for each range, and change the colors associated with each range using the Format menu.
For example, this
timechart generated single value visualization shows color by value and has the background color mode selected.
Color by trend
Coloring by trend is available for single values generated with a query including the
timechart command. Coloring by trend means that the sparkline and trend indicator in this visualization change color to show changes in data. By default, positive changes make the sparkline and trend indicator appear green, while negative changes make them red. When results show no change, the trend color is black.
For example, this visualization shows color by trend and has the foreground color mode selected.
You can reverse the settings for trend colors in the Format menu. You can also specify a different trend time window for the visualization.
Migration for rangemap settings in existing single value visualizations
Existing single value visualizations might use a query with the
rangemap command to configure ranges and colors.
By default, a single value visualization has this color mapping configuration for ranges.
Caution: As support for the
rangemap command is limited, it is not recommended for building new single value visualizations. Queries using
rangemap currently generate a single value, but UI configurations override the query-based settings.
For existing single value visualizations, it is recommended to migrate
rangemap command settings out of the query. Replace query-based settings with equivalent range and color settings in the Format menu Color panel.
Captions and units
Use the Format menu's General options panel to add a caption for a single value visualization. You can specify a unit of measurement and its position in the Number Format panel. For instance, you can add $ before a value reflecting sales in the United States or MB after a value tracking data transfers.
Note: If you are migrating from earlier versions of Splunk software and your visualization includes Before and After labels, the Format menu shows prompts to update label and unit text using the Unit and Caption fields.
Captions add descriptive context to a single value visualization. To add a caption, select the Format menu General panel. Use the caption text field here to enter a description. Captions appear below the single value.
Units can indicate standard measurements for single values. To add a unit to the visualization, select the Format menu Number Format panel and edit the Unit field. You can choose whether a unit appears before or after the value. It is recommended to keep unit text to five characters or fewer. Use a caption for longer text.
If you are working with a large single value or one that requires precision, you can change the number formatting for the visualization. In the Format menu Number Format panel, you can choose thousand separators or different degrees of decimal precision.
By default, drilldown is disabled for single value visualizations. You can enable drilldown functionality using Simple XML. For more information about drilldown, see Drilldown behavior in this manual.
Generate a single value
This documentation applies to the following versions of Splunk® Enterprise: 6.5.0, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.10