Is there a way to get the full featured table that shows up under the "Statistics" tab for ad-hoc queries on a dashboard??
Specifically I want the stats, paging and columns to stick to the top of the screen when scrolling vertically and the horizontal scrollbar to be always visible.
Run anywhere example:
index=_internal
| eval reallyLongFormattedTimeColumnName = strftime(_time, "%c")
| eval reallyLongColumnNameForLowerHostToCauseHorizontalScrolling = lower(host)
| eval reallyLongColumnNameForLowerRawJustInCaseYouHaveABigMonitor = lower(_raw)
| table _time, reallyLongFormattedTimeColumnName, host, reallyLongColumnNameForLowerHostToCauseHorizontalScrolling, _raw, reallyLongColumnNameForLowerRawJustInCaseYouHaveABigMonitor
When running this in an ad-hoc search I get a cool section above the column names that has some paging and formatting tools. Those go away when this code is ran in a dashboard.
Also, the ad-hoc search keeps the toolbar and column headers at the top of the scrolling area as well as the horizontal scrollbar on the bottom.
These features are really nice, so would love to use them on my dashboard. Thanks.
p.s.
Running in Splunk Cloud so using fancy pants CSS and JS is possible but not desirable as we have to go through vetting to get those types of changes uploaded. Keeping things as Simple Xml would be ideal.
