topic Re: hide calculated field from dashbaord in Splunk Search

hide calculated field from dashbaord

surekhasplunk — Fri, 17 Nov 2017 15:30:09 GMT

Hi,

I have a calculated field call Percentage which is required for other calculations but i dont want that value to be shown in the dashbaord.

I tried table command without Percentage field name but that is still showing as Null% under that field.
I tried fields command with - Percentage but didn't work .

Re: hide calculated field from dashbaord

elliotproebstel — Fri, 17 Nov 2017 15:39:24 GMT

Is it possible that your dashboard has a <fields> tag in the XML specifying that the Percentage field should be shown?

Re: hide calculated field from dashbaord

somesoni2 — Fri, 17 Nov 2017 15:40:44 GMT

Could you share your search here? In ideal situation, both of the things that you tried should've worked.

Re: hide calculated field from dashbaord

niketn — Fri, 17 Nov 2017 15:47:50 GMT

@surekhasplunk, Simple XML Configuration <fields> can be used to hide Percent field by displaying all the other fields and excluding Percent. You can still use the default table drilldown token $row.Percent$ , if you want to pass on the clicked Percent value. Check out Simple XML Reference for table: https://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML#table

<table>
    <search>
        <query>
              <YourBaseSearch>
              | table field1 field2 field3 Percentage
        </query>
    </search>
    <fields>field1,field2,field3</fields>
    <drilldown>
         <set token="tokPercent">$row.Percent$</set>
    </drilldown>
</table>

Re: hide calculated field from dashbaord

surekhasplunk — Fri, 17 Nov 2017 16:20:11 GMT

Thanks @niketnilay it worked by adding tag with my fields in that omitting the percentage field.

Thanks a lot ... cheers

Re: hide calculated field from dashbaord

niketn — Fri, 17 Nov 2017 19:08:27 GMT

Yay! Glad it worked.... Happy Weekend 🙂