Dashboards & Visualizations

How to see full text of label/header instead of truncated text in hiddensearch

Anvita
Explorer

Is there any way to increase the size of the label/header in a chart/report so that one can see the full text instead of truncated text?

e.g. <module name="HiddenSearch" layoutPanel="panel_row1_col1" group="Total sessions Done Today By All Program" autoRun="True">

Here the label/group "Total sessions Done Today By All Program" gets truncated to "Total Tests ...All Pragram" in the dashboard and fully viewable in case of mouse over only.

Please give me the suggestions on this.

Tags (1)
0 Karma

sideview
SplunkTrust
SplunkTrust

It gets truncated because it's trying to leave enough room for the 'last refreshed at:' text which you see over on the right.

A way around this problem is to not use the group="" attribute at all.
Take that out and instead use a module to do the same thing. GenericHeader is probably the best although you could use StaticContentSample (with CDATA'ed HTML), or ServerSideInclude. Here's a GenericHeader module for you:

<module name="GenericHeader" layoutPanel="panel_row1_col1">
  <param name="label">Total sessions done today by all program</param>
</module>

That module has no truncation logic so the whole thing will definitely display. And GenericHeader is a reasonable stand-in visually for the group="" header.

0 Karma

sideview
SplunkTrust
SplunkTrust

Hm. Well then your options are more limited. #1) Only have one panel per row, so the truncation just doesnt kick in #2) have group=" " and ALSO have the GenericHeader module. However in that case the Header and the 'last refreshed' wont be on the same line. If that wasnt acceptable some custom CSS could probably fix that but it'd be a hack and there are significant drawbacks.

3 Apply some custom JS at the app level that just disables the panel title truncation entirely... I could look into that if you were interested (I do consulting around Splunk and Splunk apps; see my profile)

0 Karma

Anvita
Explorer

Thanks Nick..! This works but I also want the text "last refreshed at:" at the right side. How to achieve this?

Please guide me.

0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...