I'm running a report on Splunk 6.x and would like to remove the chart on the top of my PDF that is rendered?
This can be done by going under savedsearches.conf, add "display.visualizations.show = 0" to saved search.
View solution in original post
rsimmons gave a good answer. You can also change that by going to Settings --> Searches, reports and alertschoose the report and go to Advanced Edit display.visualizations.show and change the value to "0"
Hi @anwarmmian can be the setting of display.visualizations.show = 0 in GUI overruled by different setting?
I have the value set to 0 and I am still getting the chart at the top of pdf send by sendemail command.
Thank you for help.