Create table in dashboard that displays columns a,b,c but when clicked on, expands to show columns x,y,z

[david_nunn]

Hi

I'm trying to make java exceptions easier to read in a dashboard. The data is in JSON format and I have a search which formats the data into a table. But the exceptions are just too big to be displayed for all events at the same time.

So what I would like to do is, display the first 3 columns in the dashboard so I can identify the relevant event. Then once the event is clicked on, it expands to show more columns which contain the exception details.

Any assistance would be greatly appreciated.

[richgalloway]

Perhaps the "Table Row Expansion" example in the Splunk Dashboard Examples app (https://splunkbase.splunk.com/app/1603/) will help.

[david_nunn]

I found this post to be of most use:

https://community.splunk.com/t5/Developing-for-Splunk-Enterprise/How-to-create-custom-row-expansion-...