Two thoughts. In classic, you can probably use JavaScript to implement mouse-over or similar. (You can produce a "hidden" column named as an internal field, e.g., _fieldname.) Another method could ...
See more...
Two thoughts. In classic, you can probably use JavaScript to implement mouse-over or similar. (You can produce a "hidden" column named as an internal field, e.g., _fieldname.) Another method could be to produce the column with ellipses, the use a drilldown to display the full text. Here is an example of the latter: <dashboard version="1.1" theme="light">
<label>Very long text</label>
<description>https://community.splunk.com/t5/Dashboards-Visualizations/Splunk-dashboards/m-p/692394#M56730</description>
<init>
<set token="reveal_tok">init</set>
</init>
<search>
<query>
| makeresults format=csv data="reveal
short"
</query>
</search>
<row>
<panel>
<title>reveal = $reveal_tok$</title>
<table>
<search>
<query>| makeresults format=csv data="fieldname
not as long
very very very very very very very very very very loooooooooooooooooooooog"
| rename fieldname as _fieldname
| eval fieldname = if(len(_fieldname) > 50 AND len("$reveal_tok$") < 51, substr(_fieldname, 0, 50) . " ... " , _fieldname)</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">cell</option>
<option name="refresh.display">progressbar</option>
<drilldown>
<set token="reveal_tok">$row._fieldname$</set>
</drilldown>
</table>
</panel>
</row>
</dashboard> When the dashboard loads, the initial value of $reveal_tok$ is set to "init". If you click that ellipses, the token's value becomes that of _fieldname (which is very long on this row). The drilldown therefore reveals the full string. If you click on that short string, $reveal_tok$ becomes the shorter string, therefore the drilldown changes display back to ellipses for very long strings. There are other ways to do this, depending on your visualization needs and coding style.