Custom expand table row visulization

tomasmoser · ‎01-28-2020

Hi Team,

I have a simple table that I want to show in a dashboard - user search history. Columns "_time" and "search". On top of that I want to see ONLY first line from every row with a search where this search span multiple lines - expandable row with little "arrow" on the left side.

This is probably done via some JavaScript file and custom vizualisation logic. I have seen many examples but none such simple - usually expanded row provide some additional search. I do not want that. Can someone give me a .js code example to achieve my goal?

I want the same output as here in "Search and Reporting" app under "Search History".

Tomas

woodcock · ‎01-28-2020

See here:
https://github.com/thibodux/developer_gadgets
Or here:
https://splunkbase.splunk.com/app/3689/

Custom expand table row visulization

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Level Up Your Workflow: Mastering Splunk Cloud Management via Terraform

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs.

Join the Conversation

Custom expand table row visulization

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Level Up Your Workflow: Mastering Splunk Cloud Management via Terraform

Forwarder Topology Guidance: Intermediate HF vs Intermediate UF

At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs.