Configurable Heat Grid / Heatmap visualization that can be used to show the quick status or health of many items at once. Support for grouping, and can display as hexagons, squares, diamonds or circles. Fully customisable tooltips, drilldown support, and numerous color schemes. Works in dark-mode.
Copyright (C) 2021 Chris Younger. I am a Splunk Professional Services consultant working for JDS Australia, in Brisbane Australia.
Source code | Questions, Bugs or Suggestions | My Splunk apps
This app is not "visible" in the Splunk UI app menu. After installing the app, follow this process:
1. Do a search of any data and switch to the visualisation tab
2. In the top left, in the visualisastion menu, select "Heat Grid viz"
3. Open the "Format" menu then select "Help"
4. There will be a link to the in-app documentation, which includes working examples
This visualisation expects data with specific field names. Use | rename to make sure your fields match what is expected. Every row of data will become a cell in the heatgrid. Data must always have "value" or "color" field (not both). If the "value" field is provided, the color will be automatically set based on the selected color gradiant. It is also possible to explicitly set color in the data by providing a "color" field.
...some search... | table value tooltip group
These are the fields that can be provided in data:
value - Numeric - This is the value that is used to determine the color of this cell. By default expected range is between 0 and 100. If the range of your data is different, then change the 'data range' option in the 'format' menu. Either this or the 'color' field below is mandatory.
color - String - The color of the cell can be explicity set by passing in a valid html color code (E.g. "#FFFFFF", "red", or "rga(0,255,0)"). Either this or 'value' field above must be supplied.
tooltip - String - The contents to show on the tooltip when this cell is hovered.
tooltip_value - String - Specify what value should be shown on the tooltip when hovering this cell. For example, to set a % sign: | eval tooltip_value = value + " %"
tooltip_html - String - Providing this field will override the other tooltip fields and will allow fully custom HTML content. For example: | eval tooltip_html = "Location: Sydney</br>Owner: Operations</br>Value: <strong>" + value + " %<strong>"
group - String - If the group field is provided then cells with the same value will be grouped together with a label. Note that groups with only a few items in them may not layout very well. Squares and hexagons shapes allow for the most efficient use of space.
drilldown - String - If supplied, clicking the cell will cause a token to be set with this value. The default token is heatgrid_viz_drilldown but it can be changed in the 'Format' menu.
drilldown_url - String - If supplied, will cause this URL to be opened in a new tab/window when the cell is clicked.
The following third-party libraries are used by this app. Thank you!
No changes, just a version bump to prevent Splunkbase from archiving this app.
v.1.0.3
Update internal jquery library for Splunk Cloud compatibility
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.