Splunk Search

Removing Column Headings with Sparkline

balcv
Contributor

I have created a search including sparkline:

index=_* type="threat" severity="medium"  | stats sparkline count | table sparkline

and when it displays, I get the heading "sparkline" above the resultant chart, but I would like to remove that heading so that I only see the sparkline.

Tags (2)
0 Karma
1 Solution

vnravikumar
Champion

Hi @balcv

Try this and let me know

<dashboard>
  <label>sparkline</label>
  <row>
    <panel>
      <html>
        <style>
          #test th[data-sort-key="sparkline"]{
          display:none !important;
          }
        </style>
      </html>
      <table id="test">
        <search>
          <query>index=_* type="threat" severity="medium"  | stats sparkline count | table sparkline</query>
          <earliest>0</earliest>
          <latest></latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</dashboard>

View solution in original post

chrisyounger
SplunkTrust
SplunkTrust

You can also use |rename sparkline as " "

0 Karma

vnravikumar
Champion

Hi @balcv

Try this and let me know

<dashboard>
  <label>sparkline</label>
  <row>
    <panel>
      <html>
        <style>
          #test th[data-sort-key="sparkline"]{
          display:none !important;
          }
        </style>
      </html>
      <table id="test">
        <search>
          <query>index=_* type="threat" severity="medium"  | stats sparkline count | table sparkline</query>
          <earliest>0</earliest>
          <latest></latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</dashboard>

balcv
Contributor

Perfect, that's exactly what I was after. Simple when you know how. Thank you.

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...