Hello experts,
I have a case where I need to show a field in a table, but I need to hide it in the chart.
Search:
index = ..... my search | stats ..... by field_1| eval field_1 = "Hello"| eval field_4 = "Hello\nHow are you"| table field_1, field_2, field_3
Table:
field_1 field_2 field_3
1: Hello foo jjoooo
How are you
2: Hello malware jhon
How are you
Issues: When try to use the field_1 in the bar chart, I see the value as empty because of a long string.
I wasn't able to create a new field ( field_4) with previous value of field_1 and show it on the chart, but not in the table. The chart in the report takes input from the table. I need to hide the field_1 column in the table and want to display the field_4 in the bar chart.
Note: I faced the same issue in the dashboard. I used fields tag in the xml to hide.
Any help is appreciated.
Regards,
Nagee.
First answer here shows how to do what you need, without CSS https://answers.splunk.com/answers/204419/do-this-in-simple-xml.html
You can use CSS for the table. Include the CSS in your dashboard. See the code below, modify as per your requirement
td:nth-child(4) {
display: none
}