The ability isn't officially supported but you can manage with a bit of CSS. Just place CSS in $SPLUNK_HOME/etc/apps/YOUR_APP/appserver/static/application.css that hides the column. Below is an example below that hides the 8th column:
/*
* Hide the 8th column:
*/
.splView-YOUR_VIEW_NAME .SimpleResultsTable tr td:nth-of-type(8),
.splView-YOUR_VIEW_NAME .SimpleResultsTable tr th:nth-of-type(8){
display:none;
}
You will need to make that selector more specific if you have multiple tables on that page (just use the ID of the relevant SimpleResultsTable).
This technique works in simple XML and advanced XML.
As of Splunk 6.0 or 6.1, this is fully supported in Simple XML.
Use the option within table to enumerate the list and order of fields for final display, which may be a subset of the fields returned in the search results. Note that you still have access to all fields returned from the search results ($row.field_name$) to use in drilldown.
http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML#fields
The ability isn't officially supported but you can manage with a bit of CSS. Just place CSS in $SPLUNK_HOME/etc/apps/YOUR_APP/appserver/static/application.css that hides the column. Below is an example below that hides the 8th column:
/*
* Hide the 8th column:
*/
.splView-YOUR_VIEW_NAME .SimpleResultsTable tr td:nth-of-type(8),
.splView-YOUR_VIEW_NAME .SimpleResultsTable tr th:nth-of-type(8){
display:none;
}
You will need to make that selector more specific if you have multiple tables on that page (just use the ID of the relevant SimpleResultsTable).
This technique works in simple XML and advanced XML.
Thanks a lot for the advice!
Is this still current?
Not in the base product - but yes in sideview utils