https://community.splunk.com/t5/Getting-Data-In/suppressing-underscore-prefixed-columns-from-report/m-p/78326#M16016 <P>You could try the fields command.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/fields">http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/fields</A></P> Tue, 19 Jun 2012 13:03:39 GMT sdaniels 2012-06-19T13:03:39Z https://community.splunk.com/t5/Getting-Data-In/suppressing-underscore-prefixed-columns-from-report/m-p/78325#M16015 <P>I have a report:<BR /> blah, blah, blah<BR /> | stats count as NbrSaves, dc(UserId) as DistinctUserIds<BR /> by _date_numericyear, _date_numericmonth, date_year, date_month, date_mday, date_hour, _date_numericminute<BR /> | sort 0 + _date_numericyear, _date_numericmonth, date_mday, date_hour, _date_numericminute<BR /> | rename date_year as Year, date_month as Month, date_mday as Day, date_hour as Hour, _date_numericminute as Minute<BR /> | outputcsv AffinityPlanSaveRate.csv </P> <P>It outputs too many items for the screen and is instead sent to a report, but _date_numericyear and _date_numericmonth (which are computed fields just used for ordering purposes) also appear in the saved file, although not on the display. I thought the underscore would suppress them from both. How can I also suppress them from the generated report?</P> Mon, 28 Sep 2020 11:57:36 GMT https://community.splunk.com/t5/Getting-Data-In/suppressing-underscore-prefixed-columns-from-report/m-p/78325#M16015 RVDowning 2020-09-28T11:57:36Z https://community.splunk.com/t5/Getting-Data-In/suppressing-underscore-prefixed-columns-from-report/m-p/78326#M16016 <P>You could try the fields command.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/fields">http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/fields</A></P> Tue, 19 Jun 2012 13:03:39 GMT https://community.splunk.com/t5/Getting-Data-In/suppressing-underscore-prefixed-columns-from-report/m-p/78326#M16016 sdaniels 2012-06-19T13:03:39Z https://community.splunk.com/t5/Getting-Data-In/suppressing-underscore-prefixed-columns-from-report/m-p/78327#M16017 <P>Ah, didn't know about the + and - signs. Thanks much.</P> Tue, 19 Jun 2012 13:36:33 GMT https://community.splunk.com/t5/Getting-Data-In/suppressing-underscore-prefixed-columns-from-report/m-p/78327#M16017 RVDowning 2012-06-19T13:36:33Z