Splunk Search

disable drill down on statistics table for last row

New Member

I have a table as shown below

team open>3 days open>4 days Avg_days_task_open
A 2 4 4
B 4 6 4
Total 6 10

As you see above this is a stats table which shows how many days task open for each team A and B I brought the last row total with my SPL query.

I have used conditional drill down for all values depending on fields and it is a drill down to another dashboard. I have even written condition for disabling drill down for average column and team column
the problem is I dont want user to click on last total row . I dont want to use the default total options in splunk dashboard because
it adds up even avg days open task , which is incorrect
please let me know how to achieve this.

Tags (2)
0 Karma

Esteemed Legend

The easiest way is to move the total details to the header (field names) like I show here:
Then you don't need the last "Total" row and remove it so that there is nothing on which to click!

0 Karma
Get Updates on the Splunk Community!

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...