<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Why are report table columns not rendered properly when exporting to PDF or CSV? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Why-are-report-table-columns-not-rendered-properly-when/m-p/165729#M33613</link>
    <description>&lt;P&gt;I think you need to select explicitely which column you want to keep, and display them in a table.&lt;BR /&gt;
Add at the end of your search:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| table Time, User, StartTime, EndTime, Duration, Region, City, Country, rDNS, Gateway
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Fri, 13 Mar 2015 07:55:43 GMT</pubDate>
    <dc:creator>grundsch</dc:creator>
    <dc:date>2015-03-13T07:55:43Z</dc:date>
    <item>
      <title>Why are report table columns not rendered properly when exporting to PDF or CSV?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Why-are-report-table-columns-not-rendered-properly-when/m-p/165726#M33610</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;I have a report in table format that I have created and saved.  This has the columns that I find useful with useful names.  When I press export and select PDF, I just get the time and the raw data.  When I select CSV I get all columns available rather than just those shown in my saved report.&lt;/P&gt;

&lt;P&gt;Can someone assist?&lt;/P&gt;

&lt;P&gt;Thank you&lt;/P&gt;

&lt;P&gt;M&lt;/P&gt;</description>
      <pubDate>Fri, 06 Mar 2015 15:12:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Why-are-report-table-columns-not-rendered-properly-when/m-p/165726#M33610</guid>
      <dc:creator>clifforg</dc:creator>
      <dc:date>2015-03-06T15:12:52Z</dc:date>
    </item>
    <item>
      <title>Re: Why are report table columns not rendered properly when exporting to PDF or CSV?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Why-are-report-table-columns-not-rendered-properly-when/m-p/165727#M33611</link>
      <description>&lt;P&gt;What is your report query? Are you using any 'table' or aggregation commands such as stats,chart etc?&lt;/P&gt;</description>
      <pubDate>Fri, 06 Mar 2015 17:10:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Why-are-report-table-columns-not-rendered-properly-when/m-p/165727#M33611</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2015-03-06T17:10:51Z</dc:date>
    </item>
    <item>
      <title>Re: Why are report table columns not rendered properly when exporting to PDF or CSV?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Why-are-report-table-columns-not-rendered-properly-when/m-p/165728#M33612</link>
      <description>&lt;P&gt;Here is my search&lt;/P&gt;

&lt;P&gt;index=citrix_ns AND "SSLVPN ICAEND_CONNSTAT" | lookup dnslookup clientip AS CitrixNS_SourceIP OUTPUT clienthost AS rDNS | iplocation CitrixNS_SourceIP AS src_ip | rename CitrixNS_user As User CitrixNS_SourceIP As SourceIP CitrixNS_StartTime As StartTime CitrixNS_EndTime As EndTime CitrixNS_Duration As Duration host As Gateway | eval Time=_time | convert ctime(Time)&lt;/P&gt;

&lt;P&gt;It won't let me attach a screenshot of the report but i have the columns sorted&lt;/P&gt;

&lt;P&gt;_time&lt;BR /&gt;
User&lt;BR /&gt;
StartTime&lt;BR /&gt;
EndTime&lt;BR /&gt;
Duration&lt;BR /&gt;
Region&lt;BR /&gt;
City&lt;BR /&gt;
Country&lt;BR /&gt;
rDNS&lt;BR /&gt;
Gateway&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 19:05:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Why-are-report-table-columns-not-rendered-properly-when/m-p/165728#M33612</guid>
      <dc:creator>clifforg</dc:creator>
      <dc:date>2020-09-28T19:05:50Z</dc:date>
    </item>
    <item>
      <title>Re: Why are report table columns not rendered properly when exporting to PDF or CSV?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Why-are-report-table-columns-not-rendered-properly-when/m-p/165729#M33613</link>
      <description>&lt;P&gt;I think you need to select explicitely which column you want to keep, and display them in a table.&lt;BR /&gt;
Add at the end of your search:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| table Time, User, StartTime, EndTime, Duration, Region, City, Country, rDNS, Gateway
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 13 Mar 2015 07:55:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Why-are-report-table-columns-not-rendered-properly-when/m-p/165729#M33613</guid>
      <dc:creator>grundsch</dc:creator>
      <dc:date>2015-03-13T07:55:43Z</dc:date>
    </item>
    <item>
      <title>Re: Why are report table columns not rendered properly when exporting to PDF or CSV?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Why-are-report-table-columns-not-rendered-properly-when/m-p/165730#M33614</link>
      <description>&lt;P&gt;This was exactly the solution - thank you!&lt;/P&gt;</description>
      <pubDate>Fri, 13 Mar 2015 11:22:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Why-are-report-table-columns-not-rendered-properly-when/m-p/165730#M33614</guid>
      <dc:creator>clifforg</dc:creator>
      <dc:date>2015-03-13T11:22:00Z</dc:date>
    </item>
  </channel>
</rss>

