Visualising Service Status with Emoji

Splunk dashboards can host a variety of different visualisation types, from maps and charts to 3D globes. Its also possible to use something as simple as Emoji. Inspired by this app, I propose the use of the following mapping of severity to emoji.

Splunk ITSI is a service monitoring tool that can intelligently assign severities to services based on underlying infrastructure or application issues. There are also many other severity and status categorisations, as listed in the references on this page.

Severity Recommended Emoji Other Applicable Emoji Reason for Recommendation
Critical ๐Ÿ’€ โ˜ ๏ธ ๐Ÿ˜ก๐Ÿคฌ๐Ÿ”ฅ๐Ÿ’ฉโŒ๐Ÿ›‘โ›”๏ธ๐Ÿ“›๐Ÿšซ Significantly different than all other recommended emoji
High ๐Ÿ˜ต ๐Ÿ˜ณ๐Ÿคช๐Ÿ˜ ๐Ÿ˜ ๐Ÿ˜ท๐Ÿค’๐Ÿค•๐Ÿคข๐Ÿคฎโš ๏ธ๐Ÿ˜ฑ๐Ÿ˜ค๐Ÿ˜ข๐Ÿ˜ญ๐Ÿ˜ฆ๐Ÿ˜ง๐Ÿ˜จ๐Ÿ˜ฉ๐Ÿคฏ๐Ÿ˜ฌ๐Ÿ˜ฐ Open mouth and Xโ€™d eyes lead to quick identification
Medium ๐Ÿ˜ฅ ๐Ÿ˜ฃ๐Ÿ˜ฎ๐Ÿค๐Ÿ˜ฏ๐Ÿ˜ช๐Ÿ˜ซ๐Ÿ˜–๐Ÿ˜ž๐Ÿ˜Ÿ Emoji with sweat and frown
Low ๐Ÿค” ๐Ÿคจ๐Ÿคจ๐Ÿ˜๐Ÿ˜‘ Emoji with hand and straight mouth
Normal ๐Ÿ˜ƒ ๐Ÿ˜๐Ÿ˜€๐Ÿ˜„๐Ÿ˜‰๐Ÿ˜Š๐Ÿ˜‹๐Ÿ™‚๐Ÿ˜Ž๐Ÿ‘ Big eyes and big smile
Maintenance ๐Ÿ”จ ๐Ÿคž๐Ÿ”งโš’ ๐Ÿ› โ› Hammer is significantly different
Informational โ„น๏ธ ๐Ÿง ๐Ÿค“ They made an emoji specifically for Information, letโ€™s use it

Using Emoji in your Splunk query

| rangemap field=load ๐Ÿ’€=90-100 ๐Ÿ˜ต=80-89 ๐Ÿ˜ฅ=70-79 ๐Ÿค”=50-69 ๐Ÿ˜ƒ=0-49

Example dashboard

<dashboard>
  <label>Emoji-Monitor</label>
  <row>
    <panel>
      <single>
        <search>
          <query>
| makeresults | eval load=random()%100
| rangemap field=load ๐Ÿ’€=90-100 ๐Ÿ˜ต=80-89 ๐Ÿ˜ฅ=70-79 ๐Ÿค”=50-69 ๐Ÿ˜ƒ=0-49 default=๐Ÿ”จ
| fields range
          </query>
          <refresh>1s</refresh>
        </search>
        <option name="underLabel">indexer01</option>
      </single>
    </panel>
  </row>
</dashboard>

Emoji Monitoring Splunk Dashboard

References