Dashboards & Visualizations

How To Disable Results Table Row Clicking

Ant1D
Motivator

Hey,

Is it possible to disable row clicking on a search results table? If so, how?

Can this be tailored so that a particular table on a particular dashboard has row clicking disabled whilst another table on another dashboard has row clicking enabled?

Thanks in advance for your help.

0 Karma
1 Solution

southeringtonp
Motivator

You can do this in advanced XML: http://www.splunk.com/base/Documentation/latest/Developer/TableChartDrilldown

If you are using simple XML, you can convert advanced XML by viewing the page and adding ?showsource=1 to the end of the URL. At the bottom, it will give you the advanced XML equivalent.

Look for and remove a code block that looks like this:

<module name="ConvertToDrilldownSearch">
    <module name="ViewRedirector">
        <param name="viewTarget">flashtimeline</param>
    </module>
</module>

You can do this independently for each SimpleResultsTable, allowing drilldown only on the ones where it is desired.

If you're just getting started, you can paste this into a new view to troubleshoot first. When you are ready, overwrite your existing Simple XML view with the new vewsion.

View solution in original post

0 Karma

southeringtonp
Motivator

You can do this in advanced XML: http://www.splunk.com/base/Documentation/latest/Developer/TableChartDrilldown

If you are using simple XML, you can convert advanced XML by viewing the page and adding ?showsource=1 to the end of the URL. At the bottom, it will give you the advanced XML equivalent.

Look for and remove a code block that looks like this:

<module name="ConvertToDrilldownSearch">
    <module name="ViewRedirector">
        <param name="viewTarget">flashtimeline</param>
    </module>
</module>

You can do this independently for each SimpleResultsTable, allowing drilldown only on the ones where it is desired.

If you're just getting started, you can paste this into a new view to troubleshoot first. When you are ready, overwrite your existing Simple XML view with the new vewsion.

0 Karma

Ant1D
Motivator

Thanks for your help southeringtonp. Is it possible to do this without modules? For example, if I wrote a normal dashboard and not modules, how could I disable this feature?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...