topic Re: How to remove event option menu? in Splunk Search

How to remove event option menu?

jangid — Thu, 09 Aug 2012 11:04:38 GMT

from my dashboard I want to remove event option menu, How do I remove this?

Here is my XML

<row>
    <event>
        <searchTemplate>
        <![CDATA[ sourcetype="log" | rex field=_raw "(?i)^[^,]*,\d+\s+(?P<FIELDNAME>[^ ]+)" | where FIELDNAME="ERROR" ]]>
        </searchTemplate>
        <title>Error</title>
        <displayRowNumbers>false</displayRowNumbers>
        <entityName>results</entityName>
    </event>
</row>
<row>
    <event>
        <searchTemplate>
        <![CDATA[ sourcetype="log" | rex field=_raw "(?i)^[^,]*,\d+\s+(?P<FIELDNAME>[^ ]+)" | where FIELDNAME="WARN" OR FIELDNAME="WARNING" ]]>
        </searchTemplate>
        <title>Warning</title>
        <displayRowNumbers>false</displayRowNumbers>
        <entityName>results</entityName>
    </event>
</row>

Re: How to remove event option menu?

jangid — Thu, 16 Aug 2012 16:00:08 GMT

is there any way to remove event option menu?

Re: How to remove event option menu?

hexx — Fri, 17 Aug 2012 03:50:44 GMT

According to the reference for the Events panel, this cannot be controlled simple XML.

If you are using advanced XML, you can control this behavior by means of the 'enableEventActions' parameter of the EventsViewer module.