Splunk Search

disable drill down on statistics table for last row

New Member

I have a table as shown below

team open>3 days open>4 days Avg_days_task_open
A 2 4 4
B 4 6 4
Total 6 10

As you see above this is a stats table which shows how many days task open for each team A and B I brought the last row total with my SPL query.

I have used conditional drill down for all values depending on fields and it is a drill down to another dashboard. I have even written condition for disabling drill down for average column and team column
the problem is I dont want user to click on last total row . I dont want to use the default total options in splunk dashboard because
it adds up even avg days open task , which is incorrect
please let me know how to achieve this.

Tags (2)
0 Karma

Esteemed Legend

The easiest way is to move the total details to the header (field names) like I show here:
Then you don't need the last "Total" row and remove it so that there is nothing on which to click!

0 Karma
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...