Splunk Search

Move widgets/icons (Search, Inspect, Refresh, and Export) from bottom-right corner to top-left corner in table in Splunk Dashbaord

smusunuri
Explorer

Is there way to move "Open in Search, Inspect, Refresh, and Export" widgets in Splunk Dashboard-tables?

alt text

1 Solution

smusunuri
Explorer

Found a solution on my own. Add below css code snippet to the Simple XML, this will move widgets to the top-left corner to the table.

     <row>
         <panel depends="$alwaysHideCSS$">
           <html>
                <style>
                  .view-mode .element-footer {
                        position: absolute !important;
                        left: 108px !important;
                        top: 0px !important;
                  }
                </style>
              </html>
         </panel>
       </row>

View solution in original post

smusunuri
Explorer

Found a solution on my own. Add below css code snippet to the Simple XML, this will move widgets to the top-left corner to the table.

     <row>
         <panel depends="$alwaysHideCSS$">
           <html>
                <style>
                  .view-mode .element-footer {
                        position: absolute !important;
                        left: 108px !important;
                        top: 0px !important;
                  }
                </style>
              </html>
         </panel>
       </row>

poojak2579
Path Finder

Thank you so much for this solution.
I addition to above my requirement is : 

How to remove the mouse hover of (Search, Inspect, Refresh, and Export) menu, so that it always displayed.  
Also I wish to move only Export Icon alone to the top-left

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...