Dashboards & Visualizations

how to disable particular column to drilldown and other should be enabled to drilldown the functionality

DataOrg
Builder

I have a 10 column where 7 of the columns pass tokens to the other dashboard but i need to disable other 3 columns which should not refresh/pass the value in the token

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi premranjithj,
let me understand:

  • you have ten fields in a search,
  • you want display only seven columns,
  • you want to use seven of the ten columns as token; is it correct?

if this is your need you have only to remove the three fields from the search, to do this you have two methods:

  • if you have a table command, you only have to list the seven fields,
  • if you haven't the field list, you can use the fields command at the end of your search in this way:

    |...
    | fields - column8 - column9 - column10

It's a different thing if you have some columns to use for tokens but you don't want to display.
In this case, you list all fields in your search, then add the tag

<fields> column1, column2, column3, column4, column5, column6, column7</fields>

In this way you have all ten fields for tokens and you display only seven columns.

Bye.
Giuseppe

Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...