Splunk Search

How to remove a blank visualization table from my report and only keep the statistics table?

mehtas
Explorer

I have this following search which gives me data, but i get a visualization table which is blank. I do not want this table in the report. Is there any way of removing this table?

eventtype=cppm-system-events  cphost=* | where category="Hotfixes Updates" |table _time, host, description, action_key
0 Karma
1 Solution

mehtas
Explorer

Hi Thanks for your answer but i got it removed as when after modification , i tried o save the report there came an option for Visualization as first-> which was set by me e.g line and second -> None.

I selected None and the visual table was gone and i was left with the statistical data which i wanted.

View solution in original post

fdi01
Motivator

try like this:
eventtype=cppm-system-events cphost=* | where category="Hotfixes Updates" |fields - _time, host, description, action_key | table *

or
eventtype=cppm-system-events cphost=* | where category="Hotfixes Updates" |fields + _time, host, description, action_key

to Keep the_time, host, description and action_key fields, and display them in the order

0 Karma

mehtas
Explorer

Hi Thanks for your answer but i got it removed as when after modification , i tried o save the report there came an option for Visualization as first-> which was set by me e.g line and second -> None.

I selected None and the visual table was gone and i was left with the statistical data which i wanted.

Patient
Path Finder

why can you have the visual table of x and y axis? because you use the command |table the visualisation will be: Field name follow by the values

0 Karma

mehtas
Explorer

I mean i dont want the visual data , statistics table i want .

0 Karma

Patient
Path Finder

Hi,
please explain well what you need.

0 Karma

mehtas
Explorer

i just need to eliminate the visual table of x and y axis but i need the statistical data which i am getting by
his query.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...

Customer success is front and center at .conf25

Hi Splunkers, If you are not able to be at .conf25 in person, you can still learn about all the latest news ...