Solved: Removing Column Headings with Sparkline

balcv · ‎03-06-2019

I have created a search including sparkline:

index=_* type="threat" severity="medium"  | stats sparkline count | table sparkline

and when it displays, I get the heading "sparkline" above the resultant chart, but I would like to remove that heading so that I only see the sparkline.

vnravikumar · ‎03-06-2019

Hi @balcv

Try this and let me know

<dashboard>
  <label>sparkline</label>
  <row>
    <panel>
      <html>
        <style>
          #test th[data-sort-key="sparkline"]{
          display:none !important;
          }
        </style>
      </html>
      <table id="test">
        <search>
          <query>index=_* type="threat" severity="medium"  | stats sparkline count | table sparkline</query>
          <earliest>0</earliest>
          <latest></latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</dashboard>

View solution in original post

chrisyounger · ‎03-06-2019

You can also use |rename sparkline as " "

vnravikumar · ‎03-06-2019

Hi @balcv

Try this and let me know

<dashboard>
  <label>sparkline</label>
  <row>
    <panel>
      <html>
        <style>
          #test th[data-sort-key="sparkline"]{
          display:none !important;
          }
        </style>
      </html>
      <table id="test">
        <search>
          <query>index=_* type="threat" severity="medium"  | stats sparkline count | table sparkline</query>
          <earliest>0</earliest>
          <latest></latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</dashboard>

balcv · ‎03-06-2019

Perfect, that's exactly what I was after. Simple when you know how. Thank you.

Removing Column Headings with Sparkline

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

May 2026 Splunk Expert Sessions: Security & Observability

Network to App: Observability Unlocked [May & June Series]

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Join the Conversation