Align all values of a table to the left (for PDF export)

[ckunath]

Hello,

I am currently trying to create a table on which every value, whether number or string, is aligned to the left.
My main reason for this is that I want to export the dashboard that the table is on as PDF, and it just looks really off if the number values are aligned to the right while the other ones are aligned to the left.

Is there a way to do it via simple XML?

Any help is highly appreciated!

[gcusello · Accepted solution]

Hi ckunath,
if you don't want to modify CSS the fastest way is to change all numbers in strings using eval command and tostring function, e.g.

| eval amount=tostring(amount,"commas")

Bye.
Giuseppe

[arayapati83]

If the number is < 999 which does not need comma, the PDF export is not aligning properly. Numbers with comma is on one side and without is on another side. is there a better way to align?

[iKate]

I had the same issue and solved it with zero-width space code (& #8203;)

| eval User = "& #8203;".User

Use it without space in code

[jviray]

I couldn't get this to work since it would just append the Unicode Decimal Code to the value (e.g., &#8203;<value>).  I was able to get it to work by adding a space instead:

<field>=" "+<field>

[ckunath]

Thank you for your advise giuseppe! But is there a way to eval the values to string without the commas?
If I just simply do
eval amount=tostring(amount)
without the comma separators, it will still show the numbers on the right hand side in the table and in the .PDF.

[gcusello]

Hi try with

| eval count=printf("%-10d",<your_field>)

beware to the number in printf function, must me greater than quantity of your numbers
see http://docs.splunk.com/Documentation/Splunk/6.6.2/SearchReference/ConversionFunctions

Bye.
Giuseppe

[ckunath]

Thanks for the tip! I now however get the error message that, despite what's told in the docs, printf is undefined or unsupported in "eval". Could this be an error due to me using splunk 6.5.2? Or is there a way to fix this?

[gcusello]

yes, this function is present from 6.6.x.
The only way is to modify CSS.
Bye.
Giuseppe