<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to freeze first  3~4 columns in a table in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272398#M43234</link>
    <description>&lt;P&gt;Here is the sample code which used _internal index and freezes first column with similar logic for other columns. &lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;myTable&lt;/STRONG&gt; is the table id, and using hidden html style applied the css. Make sure that one extra column with similar to first column. here frozen column is &lt;STRONG&gt;host&lt;/STRONG&gt; , created one more column &lt;STRONG&gt;host1&lt;/STRONG&gt; which holds the same data. &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;dashboard hideEdit="false"&amp;gt;
  &amp;lt;label&amp;gt;Fixed Column Test&amp;lt;/label&amp;gt;
  &amp;lt;row depends="$never$"&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;html&amp;gt;
        &amp;lt;style&amp;gt;
          #myTable div [data-view="views/shared/results_table/ResultsTableMaster"] td:nth-child(1) {
              position: fixed;
             }
             #myTable div [data-view="views/shared/results_table/ResultsTableMaster"] th:nth-child(1) {
              position: fixed;
             }
        &amp;lt;/style&amp;gt;
      &amp;lt;/html&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table id="myTable"&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;index=_internal sourcetype=splunkd |head 100 |eval host1=host | table host,host1, _time, sourcetype, source date* _raw *&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-60m@m&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
          &amp;lt;refresh&amp;gt;5m&amp;lt;/refresh&amp;gt;
          &amp;lt;refreshType&amp;gt;delay&amp;lt;/refreshType&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;15&amp;lt;/option&amp;gt;
        &amp;lt;option name="dataOverlayMode"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="percentagesRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="totalsRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="wrap"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;format type="color" field="index9"&amp;gt;
          &amp;lt;colorPalette type="sharedList"&amp;gt;&amp;lt;/colorPalette&amp;gt;
          &amp;lt;scale type="sharedCategory"&amp;gt;&amp;lt;/scale&amp;gt;
        &amp;lt;/format&amp;gt;
        &amp;lt;format type="color" field="host"&amp;gt;
          &amp;lt;colorPalette type="sharedList"&amp;gt;&amp;lt;/colorPalette&amp;gt;
          &amp;lt;scale type="sharedCategory"&amp;gt;&amp;lt;/scale&amp;gt;
        &amp;lt;/format&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;EM&gt;Note: This uses column fix so if you have bigger table or multiple table you may see the fixed column for a while then it will hide.  Use rows per page to limit the records.&lt;/EM&gt; &lt;/P&gt;

&lt;P&gt;Hope that helps, &lt;/P&gt;

&lt;P&gt;Cheers !!!&lt;/P&gt;</description>
    <pubDate>Thu, 25 Jul 2019 23:01:52 GMT</pubDate>
    <dc:creator>vasanthmss</dc:creator>
    <dc:date>2019-07-25T23:01:52Z</dc:date>
    <item>
      <title>How to freeze first  3~4 columns in a table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272387#M43223</link>
      <description>&lt;P&gt;How to freeze first  3~4 columns in a table view in a dashboard&lt;/P&gt;</description>
      <pubDate>Wed, 01 Feb 2017 11:44:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272387#M43223</guid>
      <dc:creator>ravitejaj</dc:creator>
      <dc:date>2017-02-01T11:44:23Z</dc:date>
    </item>
    <item>
      <title>Re: How to freeze first  3~4 columns in a table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272388#M43224</link>
      <description>&lt;P&gt;The community can best help you if you provide details about the search you are using.&lt;/P&gt;

&lt;P&gt;My first guess is that you want to use the &lt;CODE&gt;table&lt;/CODE&gt; search query where you would list the fields you want first, e.g., &lt;CODE&gt;| table field1 field2 field3 field4 ...&lt;/CODE&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 01 Feb 2017 13:08:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272388#M43224</guid>
      <dc:creator>rjthibod</dc:creator>
      <dc:date>2017-02-01T13:08:48Z</dc:date>
    </item>
    <item>
      <title>Re: How to freeze first  3~4 columns in a table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272389#M43225</link>
      <description>&lt;P&gt;Yes exactly..&lt;/P&gt;</description>
      <pubDate>Wed, 01 Feb 2017 17:08:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272389#M43225</guid>
      <dc:creator>ravitejaj</dc:creator>
      <dc:date>2017-02-01T17:08:52Z</dc:date>
    </item>
    <item>
      <title>Re: How to freeze first  3~4 columns in a table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272390#M43226</link>
      <description>&lt;P&gt;Does my answer work for you? &lt;CODE&gt;| table field1 field2 field3 field4 ...&lt;/CODE&gt;&lt;/P&gt;

&lt;P&gt;If you want more help, share your query.&lt;/P&gt;</description>
      <pubDate>Wed, 01 Feb 2017 17:19:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272390#M43226</guid>
      <dc:creator>rjthibod</dc:creator>
      <dc:date>2017-02-01T17:19:39Z</dc:date>
    </item>
    <item>
      <title>Re: How to freeze first  3~4 columns in a table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272391#M43227</link>
      <description>&lt;P&gt;This is for table representation.. What I'm looking for is to freeze the first 2~3 columns on the left while others can be scrolled while we have he results on Wrap OFF.&lt;/P&gt;</description>
      <pubDate>Wed, 01 Feb 2017 23:12:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272391#M43227</guid>
      <dc:creator>ravitejaj</dc:creator>
      <dc:date>2017-02-01T23:12:56Z</dc:date>
    </item>
    <item>
      <title>Re: How to freeze first  3~4 columns in a table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272392#M43228</link>
      <description>&lt;P&gt;If you are looking for Excel related features try to implement JQuery with Html in splunk &lt;/P&gt;

&lt;P&gt;URL for JQuery for freeze: &lt;/P&gt;

&lt;P&gt;&lt;A href="https://plugins.jquery.com/tablefreeze/"&gt;https://plugins.jquery.com/tablefreeze/&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;@ravitejaj&lt;/P&gt;

&lt;P&gt;You can give a try like this&lt;/P&gt;

&lt;P&gt;base query |table * |fields - a,b,c,d&lt;/P&gt;</description>
      <pubDate>Wed, 01 Feb 2017 23:38:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272392#M43228</guid>
      <dc:creator>mpreddy</dc:creator>
      <dc:date>2017-02-01T23:38:51Z</dc:date>
    </item>
    <item>
      <title>Re: How to freeze first  3~4 columns in a table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272393#M43229</link>
      <description>&lt;P&gt;This will just restrict the number of fields that gets displayed.. I need all the fields.. say for ex: I have 10 fields, First 3/4 on the left should freeze while others Scroll.&lt;/P&gt;</description>
      <pubDate>Wed, 01 Feb 2017 23:47:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272393#M43229</guid>
      <dc:creator>ravitejaj</dc:creator>
      <dc:date>2017-02-01T23:47:45Z</dc:date>
    </item>
    <item>
      <title>Re: How to freeze first  3~4 columns in a table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272394#M43230</link>
      <description>&lt;P&gt;That is something different.&lt;/P&gt;

&lt;P&gt;This will require custom CSS on your table. You will have to add a CSS file to the dashboard to set the appropriate CSS settings on the first 2-3 columsn. You cannot do what you are requesting in SimpleXML.&lt;/P&gt;</description>
      <pubDate>Thu, 02 Feb 2017 00:15:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272394#M43230</guid>
      <dc:creator>rjthibod</dc:creator>
      <dc:date>2017-02-02T00:15:08Z</dc:date>
    </item>
    <item>
      <title>Re: How to freeze first  3~4 columns in a table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272395#M43231</link>
      <description>&lt;P&gt;Yeah, I get it.. Do we have any sample css for this ?&lt;/P&gt;</description>
      <pubDate>Thu, 02 Feb 2017 01:08:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272395#M43231</guid>
      <dc:creator>ravitejaj</dc:creator>
      <dc:date>2017-02-02T01:08:28Z</dc:date>
    </item>
    <item>
      <title>Re: How to freeze first  3~4 columns in a table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272396#M43232</link>
      <description>&lt;P&gt;Ah you mean like you can in Excel. Hmm.&lt;/P&gt;</description>
      <pubDate>Thu, 02 Feb 2017 01:56:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272396#M43232</guid>
      <dc:creator>mrgibbon</dc:creator>
      <dc:date>2017-02-02T01:56:40Z</dc:date>
    </item>
    <item>
      <title>Re: How to freeze first  3~4 columns in a table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272397#M43233</link>
      <description>&lt;P&gt;Probably not. Check google and stackoverflow for examples of how to freeze table columns, and then use browser developer tools or Splunk answers to identify the specific CSS elements to target.&lt;/P&gt;</description>
      <pubDate>Thu, 02 Feb 2017 11:50:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272397#M43233</guid>
      <dc:creator>rjthibod</dc:creator>
      <dc:date>2017-02-02T11:50:29Z</dc:date>
    </item>
    <item>
      <title>Re: How to freeze first  3~4 columns in a table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272398#M43234</link>
      <description>&lt;P&gt;Here is the sample code which used _internal index and freezes first column with similar logic for other columns. &lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;myTable&lt;/STRONG&gt; is the table id, and using hidden html style applied the css. Make sure that one extra column with similar to first column. here frozen column is &lt;STRONG&gt;host&lt;/STRONG&gt; , created one more column &lt;STRONG&gt;host1&lt;/STRONG&gt; which holds the same data. &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;dashboard hideEdit="false"&amp;gt;
  &amp;lt;label&amp;gt;Fixed Column Test&amp;lt;/label&amp;gt;
  &amp;lt;row depends="$never$"&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;html&amp;gt;
        &amp;lt;style&amp;gt;
          #myTable div [data-view="views/shared/results_table/ResultsTableMaster"] td:nth-child(1) {
              position: fixed;
             }
             #myTable div [data-view="views/shared/results_table/ResultsTableMaster"] th:nth-child(1) {
              position: fixed;
             }
        &amp;lt;/style&amp;gt;
      &amp;lt;/html&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table id="myTable"&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;index=_internal sourcetype=splunkd |head 100 |eval host1=host | table host,host1, _time, sourcetype, source date* _raw *&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-60m@m&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
          &amp;lt;refresh&amp;gt;5m&amp;lt;/refresh&amp;gt;
          &amp;lt;refreshType&amp;gt;delay&amp;lt;/refreshType&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;15&amp;lt;/option&amp;gt;
        &amp;lt;option name="dataOverlayMode"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="percentagesRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="totalsRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="wrap"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;format type="color" field="index9"&amp;gt;
          &amp;lt;colorPalette type="sharedList"&amp;gt;&amp;lt;/colorPalette&amp;gt;
          &amp;lt;scale type="sharedCategory"&amp;gt;&amp;lt;/scale&amp;gt;
        &amp;lt;/format&amp;gt;
        &amp;lt;format type="color" field="host"&amp;gt;
          &amp;lt;colorPalette type="sharedList"&amp;gt;&amp;lt;/colorPalette&amp;gt;
          &amp;lt;scale type="sharedCategory"&amp;gt;&amp;lt;/scale&amp;gt;
        &amp;lt;/format&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;EM&gt;Note: This uses column fix so if you have bigger table or multiple table you may see the fixed column for a while then it will hide.  Use rows per page to limit the records.&lt;/EM&gt; &lt;/P&gt;

&lt;P&gt;Hope that helps, &lt;/P&gt;

&lt;P&gt;Cheers !!!&lt;/P&gt;</description>
      <pubDate>Thu, 25 Jul 2019 23:01:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-freeze-first-3-4-columns-in-a-table/m-p/272398#M43234</guid>
      <dc:creator>vasanthmss</dc:creator>
      <dc:date>2019-07-25T23:01:52Z</dc:date>
    </item>
  </channel>
</rss>

