topic Re: Remove column from table if in Dashboards & Visualizations

Remove column from table if

matthaeus — Tue, 04 Aug 2020 07:01:14 GMT

Hey there!

I'm quite new in Splunk an am struggeling again. What I'm trying to do is to hide a column if every field in that column has a certain value. I've already searched a lot online and found several solutions, that should work for me but don't.

Can anybody help me out here?

Re: Remove column from table if

thambisetty — Tue, 04 Aug 2020 11:59:31 GMT

can you share some examples?

Re: Remove column from table if

to4kawa — Tue, 04 Aug 2020 12:15:36 GMT

sample:

Re: Remove column from table if

matthaeus — Tue, 04 Aug 2020 12:08:34 GMT

So I have Data like this:

	col1	col2	col3	col4	col5
a	-1	-2	-1	-1	-1
b	-1	-2	-2	-1	0
c	0	-2	0	-2	-2
d	-2	-2	0	-2	0

And what I want is, that column2 will not be displayed since all values in that column are "-2".

Re: Remove column from table if

thambisetty — Tue, 04 Aug 2020 12:31:10 GMT

I am using inputcsv and outputcsv.

if you run below search that contains field town has same value.

and I have written these results to csv to make use of them in search which is used in fields command. The subsearch will take fields which have different values.

Re: Remove column from table if

matthaeus — Tue, 04 Aug 2020 12:34:20 GMT

Works perfectly, thanks so much!

Re: Remove column from table if

thambisetty — Tue, 04 Aug 2020 12:51:42 GMT

@to4kawa answer works only for the data you posted, what if the values gets changed , lets say -2 becomes -3, every time you can't hardcode the value if you don't know the value exactly.