topic Re: How can I remove or hide a column in a table? in Splunk Search

How can I remove or hide a column in a table?

travis_bear — Fri, 25 Oct 2013 23:06:59 GMT

Here is my query; I'm trying not to have the "Total_Datapoints" column show up in the table since it has the same value for every row.

report=hw_use_by_jobs 
orig_host="myhost" |
chart 
   p50(PercentProcessorTime_max) as "p50 CPU", 
   stdev(PercentProcessorTime_max) as "CPU stdev",
   count as DataPoints
over ConcurrentTasks |
eventstats sum(DataPoints) as Total_DataPoints  |
eval "Percent of Time"=100*DataPoints/Total_DataPoints

I've experimented with calculating the Total_Datapoints value before sending the results to the table, but this has not worked out and I'm not even sure if that's the right overall approach.

Re: How can I remove or hide a column in a table?

ShaneNewman — Fri, 25 Oct 2013 23:13:08 GMT

Pretty easy 🙂

At the very end:

| fields <list of fields you want to be displayed (no commas)>

Re: How can I remove or hide a column in a table?

travis_bear — Fri, 25 Oct 2013 23:16:37 GMT

That worked! Thank you!

Re: How can I remove or hide a column in a table?

ShaneNewman — Fri, 25 Oct 2013 23:20:04 GMT

Not a problem!

Re: How can I remove or hide a column in a table?

vicvaughan — Tue, 29 Mar 2016 19:36:29 GMT

What about if you want a field hidden in the query, but you want to use those values in the drilldown?

Re: How can I remove or hide a column in a table?

rafajot — Tue, 29 Sep 2020 21:52:16 GMT

This solution is not going to work for stats where column names are dynamic, for example stats table produced by timechart. I would rather use ....|fields -column_name_to_exclude
BTW, the question is a duplicate of https://answers.splunk.com/answers/48466/remove-column-name-from-table-result.html