Thank you brentryan. We are on 6.x and having this issue with second level nested json keys. We did contact Splunk support, who pointed us here but could not instruct where to place this js. We do have a feature request in now (SPL-142795).
Meanwhile, for newer versions (we are on 6.x) the code below works when placed into /opt/splunk/share/splunk/search_mrsparkle/templates/pages/base.html
<script>
function autoExpand(){
//console.log("autoExpand started");
$(document).ready(function() {
$(".jsexpands").each(function() {
if($(this).html() == '[+]') {
$(this)[0].click();
}
});
});
setTimeout(function(){
$('.modalize-table-overlay').click();
}, 500);
//console.log("autoExpand complete");
}
// select the target node
var target = document.body;
// create an observer instance
var observer = new MutationObserver(function(mutations) {
autoExpand();
});
// configuration of the observer:
var config = { attributes: true, childList: true, characterData: true, subtree:true};
// pass in the target node, as well as the observer options
observer.observe(target, config);
</script>
... View more
