Hidden value in table

[shangshin]

Hi,
Is it possible to have a hidden value in the table meaning the values are invisible to the end user. This hideen value will be later used in the dynamic drilldown url.

Thanks in advance!

[nfilippi_splunk]

As of Splunk 6.0 or 6.1, this is fully supported in Simple XML.

Use the option within table to enumerate the list and order of fields for final display, which may be a subset of the fields returned in the search results. Note that you still have access to all fields returned from the search results ($row.field_name$) to use in drilldown.

http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML#fields

[LukeMurphey · Accepted solution]

The ability isn't officially supported but you can manage with a bit of CSS. Just place CSS in $SPLUNK_HOME/etc/apps/YOUR_APP/appserver/static/application.css that hides the column. Below is an example below that hides the 8th column:

/*
 * Hide the 8th column:
 */
.splView-YOUR_VIEW_NAME .SimpleResultsTable tr td:nth-of-type(8),
.splView-YOUR_VIEW_NAME .SimpleResultsTable tr th:nth-of-type(8){
     display:none;   
}

You will need to make that selector more specific if you have multiple tables on that page (just use the ID of the relevant SimpleResultsTable).

This technique works in simple XML and advanced XML.

[shangshin]

Thanks a lot for the advice!

[rroberts]

Is this still current?

[jonuwz]

Not in the base product - but yes in sideview utils