<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Table headers not visible in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748338#M58865</link>
    <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/241733"&gt;@rishabhpatel20&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Can you confirm that no other CSS or JS is loaded in the dashboard? Either in the first couple of lines or within other html blocks in the dashboard? I notice you have uploaded just a section of the dashboard.&lt;/P&gt;&lt;P&gt;&lt;span class="lia-unicode-emoji" title=":glowing_star:"&gt;🌟&lt;/span&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;Did this answer help you?&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;If so, please consider:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Adding karma to show it was useful&lt;/LI&gt;&lt;LI&gt;Marking it as the solution if it resolved your issue&lt;/LI&gt;&lt;LI&gt;Commenting if you need any clarification&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Your feedback encourages the volunteers in this community to continue contributing&lt;/P&gt;</description>
    <pubDate>Thu, 19 Jun 2025 13:38:00 GMT</pubDate>
    <dc:creator>livehybrid</dc:creator>
    <dc:date>2025-06-19T13:38:00Z</dc:date>
    <item>
      <title>Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748330#M58860</link>
      <description>&lt;P&gt;I am creating a query and when I see the result I see proper table with headers , but saving it to existing dashboard , it is just displaying the content without headers. I tried to expand the table size as well.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;index=abc source=port | rename port.port as Port | stats sum(port.code.557) as Tcount by Port | sort -Tcount | head 10 | table Port Tcount&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;P&gt;Search result&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rishabhpatel20_0-1750339220711.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/39417i0B3387EFC039063E/image-size/medium?v=v2&amp;amp;px=400" role="button" title="rishabhpatel20_0-1750339220711.png" alt="rishabhpatel20_0-1750339220711.png" /&gt;&lt;/span&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Below image is from dashboard pannel , no headings&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rishabhpatel20_1-1750339272497.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/39418i28251B2420E175FA/image-size/medium?v=v2&amp;amp;px=400" role="button" title="rishabhpatel20_1-1750339272497.png" alt="rishabhpatel20_1-1750339272497.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 13:22:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748330#M58860</guid>
      <dc:creator>rishabhpatel20</dc:creator>
      <dc:date>2025-06-19T13:22:11Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748331#M58861</link>
      <description>&lt;P&gt;Hey&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/241733"&gt;@rishabhpatel20&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;Can you share the dashboard source code here to understand why the headers are not visible? Also, a clear screenshot from dashboard that shows the header is missing. The second screenshot displays fields like Hot Ports, and Trans/Hour. If those are not the headers, what are you expecting?&lt;/P&gt;&lt;P&gt;Thanks,&lt;BR /&gt;Tejas.&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 13:27:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748331#M58861</guid>
      <dc:creator>tej57</dc:creator>
      <dc:date>2025-06-19T13:27:15Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748334#M58862</link>
      <description>&lt;P&gt;Please share the source for your dashboard panel&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 13:29:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748334#M58862</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2025-06-19T13:29:04Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748335#M58863</link>
      <description>&lt;P&gt;So here is the image of dashboard&amp;nbsp;&lt;BR /&gt;There are 4 tables and in all 4 no headers&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rishabhpatel20_0-1750339738689.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/39419i91B525E8F1E53E56/image-size/medium?v=v2&amp;amp;px=400" role="button" title="rishabhpatel20_0-1750339738689.png" alt="rishabhpatel20_0-1750339738689.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;Sample code for 2 tables&amp;nbsp;&lt;BR /&gt;&amp;lt;table&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;Hot Ports (ADTrans/hour)&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=port | rename port.port as Port | stats sum(port.code.557) as Tcount by Port | table Port Tcount | sort -Tcount | head 10&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-1h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;/table&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;panel id="PortGbytes"&amp;gt;&lt;BR /&gt;&amp;lt;html&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;table tbody tr th td { font-size: 75% !important; padding: 0px 1px !important;}&lt;BR /&gt;.dashboard-panel .panel-head h3 {&lt;BR /&gt;padding: 1px 1px 1px 1px !important;&lt;BR /&gt;font-size: 10px !important;&lt;BR /&gt;}&lt;BR /&gt;#PortGbytes{ height: 250px !important; width: 10% !important }&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;table&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;Hot Ports (GB/hour)&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=port | rename port.port as Port | stats sum(port.xfer_bytes) as Xbytes by Port | eval Gbytes=round(Xbytes/(1024*1024*1024),2) | table Port Gbytes | sort -Gbytes | head 10&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-1h&amp;lt;/earliest&amp;gt;&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 13:31:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748335#M58863</guid>
      <dc:creator>rishabhpatel20</dc:creator>
      <dc:date>2025-06-19T13:31:01Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748336#M58864</link>
      <description>&lt;P&gt;&amp;lt;table&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;Hot Ports (ADTrans/hour)&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=port | rename port.port as Port | stats sum(port.code.557) as Tcount by Port | table Port Tcount | sort -Tcount | head 10&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-1h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;/table&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;panel id="PortGbytes"&amp;gt;&lt;BR /&gt;&amp;lt;html&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;table tbody tr th td { font-size: 75% !important; padding: 0px 1px !important;}&lt;BR /&gt;.dashboard-panel .panel-head h3 {&lt;BR /&gt;padding: 1px 1px 1px 1px !important;&lt;BR /&gt;font-size: 10px !important;&lt;BR /&gt;}&lt;BR /&gt;#PortGbytes{ height: 250px !important; width: 10% !important }&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;table&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;Hot Ports (GB/hour)&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=port | rename port.port as Port | stats sum(port.xfer_bytes) as Xbytes by Port | eval Gbytes=round(Xbytes/(1024*1024*1024),2) | table Port Gbytes | sort -Gbytes | head 10&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-1h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;/table&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;panel id="PortPeakClients"&amp;gt;&lt;BR /&gt;&amp;lt;html&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;#PortPeakClients{ height: 250px !important; width: 10% !important }&lt;BR /&gt;table tbody tr th td { font-size: 75% !important; padding: 0px 1px !important;}&lt;BR /&gt;.dashboard-panel .panel-head h3 {&lt;BR /&gt;padding: 1px 1px 1px 1px !important;&lt;BR /&gt;font-size: 10px !important;&lt;BR /&gt;}&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;table&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;Hot Ports (Peak Clients)&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=port | rename port.port as Port | stats max(port.numclients) as PeakClients by Port | table Port PeakClients | sort -PeakClients | head 10&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-1h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;/table&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;/row&amp;gt;&lt;BR /&gt;&amp;lt;row&amp;gt;&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 13:32:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748336#M58864</guid>
      <dc:creator>rishabhpatel20</dc:creator>
      <dc:date>2025-06-19T13:32:51Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748338#M58865</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/241733"&gt;@rishabhpatel20&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Can you confirm that no other CSS or JS is loaded in the dashboard? Either in the first couple of lines or within other html blocks in the dashboard? I notice you have uploaded just a section of the dashboard.&lt;/P&gt;&lt;P&gt;&lt;span class="lia-unicode-emoji" title=":glowing_star:"&gt;🌟&lt;/span&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;Did this answer help you?&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;If so, please consider:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Adding karma to show it was useful&lt;/LI&gt;&lt;LI&gt;Marking it as the solution if it resolved your issue&lt;/LI&gt;&lt;LI&gt;Commenting if you need any clarification&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Your feedback encourages the volunteers in this community to continue contributing&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 13:38:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748338#M58865</guid>
      <dc:creator>livehybrid</dc:creator>
      <dc:date>2025-06-19T13:38:00Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748339#M58866</link>
      <description>&lt;P&gt;Here is complete code&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;&amp;lt;form version="1.1" theme="light"&amp;gt;&lt;BR /&gt;&amp;lt;label&amp;gt;ds_dash_performance Clone&amp;lt;/label&amp;gt;&lt;BR /&gt;&amp;lt;search id="base_kpi"&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc sourcetype=abc&lt;BR /&gt;| table host app,cpu_idle_pct_kpi,cpu_io_wait_pct_kpi,cpu_user_pct_kpi,ds_procs_kpi,free_disk_ds_vtmp_kpi,free_disk_tmp_ds_kpi,free_disk_var_kpi,free_disk_var_tmp_kpi,kernel_rel_kpi,load1m_kpi,load_avg_kpi,mem_free_mb_kpi,mem_free_pct_kpi,reboot_server_kpi,redhat_rel_kpi,region,rx_bps_kpi,sec_env,swap_free_mb_kpi,swap_free_pct_kpi,tx_bps_kpi&lt;BR /&gt;virtualization_kpi | dedup host&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;$time_token.earliest$&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;$time_token.latest$&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;fieldset submitButton="false"&amp;gt;&amp;lt;/fieldset&amp;gt;&lt;BR /&gt;&amp;lt;row&amp;gt;&lt;BR /&gt;&amp;lt;panel id="Inputs"&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;ds_dash_Hostinfo&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;input type="dropdown" token="metric_tok" searchWhenChanged="true" id="metric_tok"&amp;gt;&lt;BR /&gt;&amp;lt;label&amp;gt;Top 10 Host Metric Picker&amp;lt;/label&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query/&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.btime"&amp;gt;Boot Time&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.cpu.idle"&amp;gt;CPU Idle %&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.cpu.user"&amp;gt;CPU User %&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.load_1m"&amp;gt;Load Avg (1min)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.mem.free_gb"&amp;gt;Mem Free (GB)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.proc.httpsd"&amp;gt;DS Httpd Proc Count&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.proc.postgres"&amp;gt;DS Postgress Proc Count&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.proc.pcsd"&amp;gt;PCSd Process Cnt&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.swap.used_gb"&amp;gt;Swap Used (GB)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.swap.free_gb"&amp;gt;Swap Free (GB)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.net.tx_kbs"&amp;gt;Net TX (KB/s)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.net.rx_kbs"&amp;gt;Net RX (KB/s)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.mem.used_gb"&amp;gt;Mem Used (GB)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.disk.dsvtmp.free_gb"&amp;gt;/ds/vtmp Free (GB)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.disk.dsvtmp.used_gb"&amp;gt;/ds/vtmp Used (GB)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.disk.tmp.free_gb"&amp;gt;/tmp Free (GB)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.disk.tmp.used_gb"&amp;gt;/tmp Used (GB)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.disk.vartmp.free_gb"&amp;gt;/var/tmp Free (GB)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.disk.vartmp.used_gb"&amp;gt;/var/tmp Used (GB)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host.mem.sssd_be_pages"&amp;gt;sssd_be (pages)&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;default&amp;gt;host.cpu.user&amp;lt;/default&amp;gt;&lt;BR /&gt;&amp;lt;/input&amp;gt;&lt;BR /&gt;&amp;lt;input type="dropdown" token="host_tok" id="host_tok"&amp;gt;&lt;BR /&gt;&amp;lt;label&amp;gt;Host Picker&amp;lt;/label&amp;gt;&lt;BR /&gt;&amp;lt;fieldForLabel&amp;gt;ShortName&amp;lt;/fieldForLabel&amp;gt;&lt;BR /&gt;&amp;lt;fieldForValue&amp;gt;host&amp;lt;/fieldForValue&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=host | dedup host | rex field=host "(?&amp;amp;lt;ShortName&amp;amp;gt;[^\.]+)" | eval ShortName=ShortName . " (".'host.info.app'.")" | table ShortName host | sort host&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;/input&amp;gt;&lt;BR /&gt;&amp;lt;input type="time" searchWhenChanged="true" token="global_time_tok"&amp;gt;&lt;BR /&gt;&amp;lt;label&amp;gt;Time Range&amp;lt;/label&amp;gt;&lt;BR /&gt;&amp;lt;default&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-24h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/default&amp;gt;&lt;BR /&gt;&amp;lt;/input&amp;gt;&lt;BR /&gt;&amp;lt;html&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;table tbody tr td { font-size: 75% !important; padding: 0px 3px !important;}&lt;BR /&gt;.dashboard-panel .panel-head h3 {&lt;BR /&gt;padding: 1px 1px 1px 1px !important;&lt;BR /&gt;font-size: 10px !important;&lt;BR /&gt;}&lt;BR /&gt;thead {&lt;BR /&gt;visibility: hidden;&lt;BR /&gt;display: none; /* Optional, but can be more effective */&lt;BR /&gt;}&lt;BR /&gt;#Inputs { height: 320px !important; width: 20% !important }&lt;BR /&gt;&lt;BR /&gt;#host_tok { width: 100%; }&lt;BR /&gt;#host_tok [data-component] { width: auto !important; }&lt;BR /&gt;&lt;BR /&gt;#metric_tok { width: 100%; }&lt;BR /&gt;#metric_tok [data-component] { width: auto !important; }&lt;BR /&gt;&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;panel id="HostMetric"&amp;gt;&lt;BR /&gt;&amp;lt;html&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;table tbody tr td { font-size: 75% !important; padding: 0px 3px !important;}&lt;BR /&gt;.dashboard-panel .panel-head h3 {&lt;BR /&gt;padding: 1px 1px 1px 1px !important;&lt;BR /&gt;font-size: 10px !important;&lt;BR /&gt;}&lt;BR /&gt;#HostMetric { height: 320px !important; width: 65% !important }&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;chart&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;$metric_tok$&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;| mstats avg($metric_tok|s$) prestats=true WHERE "index"="abc_metrics" AND "host"=$host_tok|s$ span=30m&lt;BR /&gt;| timechart avg($metric_tok|s$) AS Avg&lt;BR /&gt;| fields - _span*&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;$global_time_tok.earliest$&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;$global_time_tok.latest$&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="charting.drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="charting.chart"&amp;gt;line&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="charting.chart.nullValueMode"&amp;gt;connect&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="charting.chart.showDataLabels"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="charting.fieldColors"&amp;gt;{"Avg":"#1e93c6"}&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="charting.gridLinesX.showMajorLines"&amp;gt;true&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="charting.axisY.abbreviation"&amp;gt;auto&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="charting.legend.mode"&amp;gt;seriesCompare&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="charting.fieldDashStyles"&amp;gt;{"Avg":"solid"}&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="displayview"&amp;gt;analytics_workspace&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;/chart&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;panel id="Hostinfo"&amp;gt;&lt;BR /&gt;&amp;lt;html&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;&lt;BR /&gt;table tbody tr td { font-size: 50% !important; padding: 0px 0px !important;}&lt;BR /&gt;.dashboard-panel .panel-head h3 {&lt;BR /&gt;padding: 0px 0px 0px 0px !important;&lt;BR /&gt;font-size: 7px !important;&lt;BR /&gt;}&lt;BR /&gt;#Hostinfo { height: 300px !important; width: 15% !important }&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;table&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;Info for $host_tok$&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=host | search host=$host_tok|s$ | rename host.cpu.count as NumCPUs, host.mem.size_gb as MemGB, host.swap.size_gb as SwapGB, host.disk.tmp.size_gb as TmpGB, host.disk.vartmp.size_gb as VarTmpGB, host.disk.dsvtmp.size_gb as DSVtmpGB, host.info.app as App, host.info.boottime as BootTime, host.info.ip as IP4, host.info.rhel as RHEL, host.info.kernel as Kernel, host.info.virt as Virtualization, host.info.type as HostType, region as Region, sec_env as SecEnv, siteid as SiteID | table NumCPUs MemGB SwapGB TmpGB VarTmpGB DSVtmpGB App BootTime IP4 RHEL Kernel Virtualization HostType Region SecEnv SiteID&lt;BR /&gt;| transpose | rename column as Key,"row 1" as Value | table Key Value&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-24h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="count"&amp;gt;18&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;/table&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;/row&amp;gt;&lt;BR /&gt;&amp;lt;row&amp;gt;&lt;BR /&gt;&amp;lt;panel id="Picker"&amp;gt;&lt;BR /&gt;&amp;lt;html&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;table tbody tr td { font-size: 75% !important; padding: 0px 3px !important;}&lt;BR /&gt;.dashboard-panel .panel-head h3 {&lt;BR /&gt;padding: 1px 1px 1px 1px !important;&lt;BR /&gt;font-size: 10px !important;&lt;BR /&gt;}&lt;BR /&gt;#Picker{ height: 300px !important; width: 15% !important }&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;table&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;Top 10 Metric by $metric_tok$&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;| mstats avg("host.cpu.user") as cpu_user&lt;BR /&gt;&amp;nbsp; WHERE index="abc_metrics" source=host host.info.app="ds" span=10m BY host&lt;BR /&gt;| dedup host&lt;BR /&gt;| eval cpu_user=round(cpu_user,1)&lt;BR /&gt;| rex field=host "(?&amp;amp;lt;host_short&amp;amp;gt;[^\.]+)"&lt;BR /&gt;| sort -cpu_user&lt;BR /&gt;| head 10&lt;BR /&gt;| rename host_short as "Host", cpu_user as "CPU Usage (%)"&lt;BR /&gt;| table "Host" "CPU Usage (%)"&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-1h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="rowNumbers"&amp;gt;false&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;format type="color" field="Value"&amp;gt;&lt;BR /&gt;&amp;lt;colorPalette type="expression"&amp;gt;case(value &amp;amp;gt;=80,"#ffab91", value &amp;amp;lt;80 AND value &amp;amp;gt;=50,"#fff59d", value &amp;amp;lt;50 AND value &amp;amp;gt;=20, "#c5e1a5", value &amp;amp;lt;20 AND value &amp;amp;gt;=0,"#81d4fa")&amp;lt;/colorPalette&amp;gt;&lt;BR /&gt;&amp;lt;/format&amp;gt;&lt;BR /&gt;&amp;lt;/table&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;panel id="PortTcount"&amp;gt;&lt;BR /&gt;&amp;lt;html&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;#PortTcount{ height: 250px !important; width: 10% !important }&lt;BR /&gt;table tbody tr th td { font-size: 75% !important; padding: 0px 1px !important;}&lt;BR /&gt;.dashboard-panel .panel-head h3 {&lt;BR /&gt;padding: 1px 1px 1px 1px !important;&lt;BR /&gt;font-size: 10px !important;&lt;BR /&gt;}&lt;BR /&gt;i.icon-sorts {&lt;BR /&gt;display: none;&lt;BR /&gt;}&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;table&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;Hot Ports (Trans/hour)&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=port | rename port.port as Port | stats sum(port.code.200) as Tcount by Port | table Port Tcount | sort -Tcount | head 10&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-1h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;/table&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;panel id="PortADTcount"&amp;gt;&lt;BR /&gt;&amp;lt;html&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;#PortTcount{ height: 250px !important; width: 10% !important }&lt;BR /&gt;table tbody tr th td { font-size: 75% !important; padding: 0px 1px !important;}&lt;BR /&gt;.dashboard-panel .panel-head h3 {&lt;BR /&gt;padding: 1px 1px 1px 1px !important;&lt;BR /&gt;font-size: 10px !important;&lt;BR /&gt;}&lt;BR /&gt;i.icon-sorts {&lt;BR /&gt;display: none;&lt;BR /&gt;}&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;table&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;Hot Ports (ADTrans/hour)&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=port | rename port.port as Port | stats sum(port.code.557) as Tcount by Port | table Port Tcount | sort -Tcount | head 10&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-1h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;/table&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;panel id="PortGbytes"&amp;gt;&lt;BR /&gt;&amp;lt;html&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;table tbody tr th td { font-size: 75% !important; padding: 0px 1px !important;}&lt;BR /&gt;.dashboard-panel .panel-head h3 {&lt;BR /&gt;padding: 1px 1px 1px 1px !important;&lt;BR /&gt;font-size: 10px !important;&lt;BR /&gt;}&lt;BR /&gt;#PortGbytes{ height: 250px !important; width: 10% !important }&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;table&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;Hot Ports (GB/hour)&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=port | rename port.port as Port | stats sum(port.xfer_bytes) as Xbytes by Port | eval Gbytes=round(Xbytes/(1024*1024*1024),2) | table Port Gbytes | sort -Gbytes | head 10&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-1h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;/table&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;panel id="PortPeakClients"&amp;gt;&lt;BR /&gt;&amp;lt;html&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;#PortPeakClients{ height: 250px !important; width: 10% !important }&lt;BR /&gt;table tbody tr th td { font-size: 75% !important; padding: 0px 1px !important;}&lt;BR /&gt;.dashboard-panel .panel-head h3 {&lt;BR /&gt;padding: 1px 1px 1px 1px !important;&lt;BR /&gt;font-size: 10px !important;&lt;BR /&gt;}&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;table&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;Hot Ports (Peak Clients)&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=port | rename port.port as Port | stats max(port.numclients) as PeakClients by Port | table Port PeakClients | sort -PeakClients | head 10&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-1h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;/table&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;/row&amp;gt;&lt;BR /&gt;&amp;lt;row&amp;gt;&lt;BR /&gt;&amp;lt;panel id="AlertInputs"&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;ds_dash_Portinfo&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;input type="dropdown" token="class_tok" searchWhenChanged="true" id="class_tok"&amp;gt;&lt;BR /&gt;&amp;lt;label&amp;gt;Class&amp;lt;/label&amp;gt;&lt;BR /&gt;&amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="Port"&amp;gt;Port&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="host"&amp;gt;Host&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="*disk"&amp;gt;Disk&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="general"&amp;gt;General&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;default&amp;gt;Port&amp;lt;/default&amp;gt;&lt;BR /&gt;&amp;lt;initialValue&amp;gt;Port&amp;lt;/initialValue&amp;gt;&lt;BR /&gt;&amp;lt;/input&amp;gt;&lt;BR /&gt;&amp;lt;input type="dropdown" token="siteid_tok" searchWhenChanged="true" id="siteid_tok"&amp;gt;&lt;BR /&gt;&amp;lt;label&amp;gt;SiteID&amp;lt;/label&amp;gt;&lt;BR /&gt;&amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;&lt;BR /&gt;&amp;lt;initialValue&amp;gt;*&amp;lt;/initialValue&amp;gt;&lt;BR /&gt;&amp;lt;fieldForLabel&amp;gt;siteid&amp;lt;/fieldForLabel&amp;gt;&lt;BR /&gt;&amp;lt;fieldForValue&amp;gt;siteid&amp;lt;/fieldForValue&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=alert | dedup siteid | table siteid&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;/input&amp;gt;&lt;BR /&gt;&amp;lt;input type="dropdown" token="priority_tok" searchWhenChanged="true"&amp;gt;&lt;BR /&gt;&amp;lt;label&amp;gt;Priority&amp;lt;/label&amp;gt;&lt;BR /&gt;&amp;lt;choice value="1"&amp;gt;1&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="2"&amp;gt;2&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="3"&amp;gt;3&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="4"&amp;gt;4&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;choice value="5"&amp;gt;5&amp;lt;/choice&amp;gt;&lt;BR /&gt;&amp;lt;default&amp;gt;5&amp;lt;/default&amp;gt;&lt;BR /&gt;&amp;lt;initialValue&amp;gt;5&amp;lt;/initialValue&amp;gt;&lt;BR /&gt;&amp;lt;/input&amp;gt;&lt;BR /&gt;&amp;lt;html depends="$hiddenForCSS$"&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;#AlertInputs { width: 15% !important; }&lt;BR /&gt;#siteid_tok option { font-size: 9px !important; line-height: 12px !important; padding: 0px 1px !important;}&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;panel id="AlertOutputs"&amp;gt;&lt;BR /&gt;&amp;lt;html&amp;gt;&lt;BR /&gt;&amp;lt;style&amp;gt;&lt;BR /&gt;#AlertOutputs{ width: 85% !important; }&lt;BR /&gt;table tbody tr td { font-size: 75% !important; padding: 0px 3px !important; text-align: left !important;}&lt;BR /&gt;&lt;BR /&gt;&amp;lt;/style&amp;gt;&lt;BR /&gt;&amp;lt;/html&amp;gt;&lt;BR /&gt;&amp;lt;table&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;index=abc source=alert alert.class=$class_tok|s$ siteid=$siteid_tok|s$ alert.priority &amp;amp;lt;= $priority_tok|s$| stats count(_time) as Count Latest(_time) as When min(alert.priority) as Priority latest(alert.message) as Message by siteid alert.class alert.item | sort by When desc| eval HoursAgo=(now()-When)/3600, HoursAgo=round(HoursAgo,3), When=strftime(When,"%+") | table HoursAgo When siteid Count Priority alert.class alert.item Message&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;-84h@h&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="count"&amp;gt;100&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="dataOverlayMode"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="percentagesRow"&amp;gt;false&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="rowNumbers"&amp;gt;false&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="totalsRow"&amp;gt;false&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;option name="wrap"&amp;gt;false&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;format type="color" field="Priority"&amp;gt;&lt;BR /&gt;&amp;lt;colorPalette type="map"&amp;gt;{"1":#FFab91,"2":#ffcc80,"3":#fff59d,"4":#c5e1a5,"5":#81d4fa}&amp;lt;/colorPalette&amp;gt;&lt;BR /&gt;&amp;lt;/format&amp;gt;&lt;BR /&gt;&amp;lt;/table&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;/row&amp;gt;&lt;BR /&gt;&amp;lt;row&amp;gt;&lt;BR /&gt;&amp;lt;panel&amp;gt;&lt;BR /&gt;&amp;lt;event&amp;gt;&lt;BR /&gt;&amp;lt;title&amp;gt;Ajay Test&amp;lt;/title&amp;gt;&lt;BR /&gt;&amp;lt;search&amp;gt;&lt;BR /&gt;&amp;lt;query&amp;gt;| mstats avg("host.cpu.user") as Value WHERE "index"="abc_metrics" source=host host.info.app="ds" span=10m BY host | dedup host | eval Value=round(Value,1) | rex field=host "(?&amp;amp;lt;host&amp;amp;gt;[^\.]+)" | sort -Value | head 10 | table host Value&amp;lt;/query&amp;gt;&lt;BR /&gt;&amp;lt;earliest&amp;gt;$global_time_tok.earliest$&amp;lt;/earliest&amp;gt;&lt;BR /&gt;&amp;lt;latest&amp;gt;$global_time_tok.latest$&amp;lt;/latest&amp;gt;&lt;BR /&gt;&amp;lt;/search&amp;gt;&lt;BR /&gt;&amp;lt;option name="list.drilldown"&amp;gt;none&amp;lt;/option&amp;gt;&lt;BR /&gt;&amp;lt;/event&amp;gt;&lt;BR /&gt;&amp;lt;/panel&amp;gt;&lt;BR /&gt;&amp;lt;/row&amp;gt;&lt;BR /&gt;&amp;lt;/form&amp;gt;&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 13:42:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748339#M58866</guid>
      <dc:creator>rishabhpatel20</dc:creator>
      <dc:date>2025-06-19T13:42:08Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748340#M58867</link>
      <description>&lt;P&gt;You have used this CSS styling which is hiding your table headers&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;thead {
visibility: hidden;
display: none; /* Optional, but can be more effective */
}&lt;/LI-CODE&gt;</description>
      <pubDate>Thu, 19 Jun 2025 13:51:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748340#M58867</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2025-06-19T13:51:26Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748341#M58868</link>
      <description>&lt;P&gt;I made this correction, still same&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;thead {
visibility: visible;
display: none; /* Optional, but can be more effective */
}&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 13:56:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748341#M58868</guid>
      <dc:creator>rishabhpatel20</dc:creator>
      <dc:date>2025-06-19T13:56:43Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748344#M58869</link>
      <description>&lt;P&gt;The display attribute is still none, therefore the element will not be displayed.&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 13:59:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748344#M58869</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2025-06-19T13:59:36Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748345#M58870</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/241733"&gt;@rishabhpatel20&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;It is specifically the display:none which is hiding your headers!&lt;/P&gt;&lt;P&gt;&lt;span class="lia-unicode-emoji" title=":glowing_star:"&gt;🌟&lt;/span&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;Did this answer help you?&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;If so, please consider:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Adding karma to show it was useful&lt;/LI&gt;&lt;LI&gt;Marking it as the solution if it resolved your issue&lt;/LI&gt;&lt;LI&gt;Commenting if you need any clarification&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Your feedback encourages the volunteers in this community to continue contributing&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 13:59:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748345#M58870</guid>
      <dc:creator>livehybrid</dc:creator>
      <dc:date>2025-06-19T13:59:49Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748347#M58871</link>
      <description>&lt;P&gt;what shall I mention instead of none? table hearder names like port count etc?&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 14:01:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748347#M58871</guid>
      <dc:creator>rishabhpatel20</dc:creator>
      <dc:date>2025-06-19T14:01:36Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748348#M58872</link>
      <description>&lt;P&gt;Why are you modifying it in the first place? Try &lt;U&gt;not&lt;/U&gt; changing the style of the thead?&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 14:05:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748348#M58872</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2025-06-19T14:05:01Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748349#M58873</link>
      <description>&lt;P&gt;Not good with CSS , its new to me hence , not sure how to solve it&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 14:06:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748349#M58873</guid>
      <dc:creator>rishabhpatel20</dc:creator>
      <dc:date>2025-06-19T14:06:01Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748350#M58874</link>
      <description>&lt;P&gt;What is it you are trying to achieve? Tables normally have headers, if you want them, don't try to use CSS to change them, unless there is a specific reason to do so, e.g. to modify their appearance in some way.&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 14:07:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748350#M58874</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2025-06-19T14:07:55Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748351#M58875</link>
      <description>&lt;P&gt;If you remove the display:none completely then it should bring back your headers.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 14:10:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748351#M58875</guid>
      <dc:creator>livehybrid</dc:creator>
      <dc:date>2025-06-19T14:10:17Z</dc:date>
    </item>
    <item>
      <title>Re: Table headers not visible</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748353#M58876</link>
      <description>&lt;P&gt;Hey&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/241733"&gt;@rishabhpatel20&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;I believe it is the html and css styling that's blocking your headers. If there's no particular need to add CSS, I would suggest you to remove it since you'll be able to add all those 4 panels in the same row by just drag and drop using the double ellipses line at the top of your panel.&lt;/P&gt;&lt;P&gt;Thanks,&lt;BR /&gt;Tejas.&lt;/P&gt;</description>
      <pubDate>Thu, 19 Jun 2025 14:18:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Table-headers-not-visible/m-p/748353#M58876</guid>
      <dc:creator>tej57</dc:creator>
      <dc:date>2025-06-19T14:18:12Z</dc:date>
    </item>
  </channel>
</rss>

