Every time I create a table visualization, I notice that the value 0 is always aligned on the left side while the rest is aligned on the right side. (322, 3483,0,0 is in the same column) Is there any reason behind it and any way to fix this? Thanks!   ... View more

I have a data like this. {     env: prod    host: prod01    name: appName    info: {       data: [ ...      ]      indicators: [         {           details: {              A.runTime: 434            A.Count: 0            B.runTime: 0            B.Count: 0            ....                     }          name: timeCountIndicator          status: UP        }        {           details: {             A.downCount: 2            A.nullCount: 0            B.downCount: 0            B.nullCount: 0            ....                   }          name: downCountIndicator          status: UP        }      ]      status: DOWN    }    metrics: { ...    }    ping: 1 } I only want to extract fields in info.indicators{}.details ONLY when info.indicators{}.name of that field is "timeCountIndicator". I tried to use spath combined with table, mvexpand and where ... | spath path=info.indicators{} output=indicators | table indicators |mvexpand indicators| where match(indicators,"timeCountIndicator") It returns a record as a string, however. And it's really hard to convert string back to fields which is hard to process. (Technically extract/rex can deal with it, but it takes a REALLY long time to extract every fields in details when I need only some fields) Is there any way to deal with this in the easier way? ... View more

Let's say that I have a dashboard A containing a table. App Name App Host LinkToB LinkToC LinkToD abc host 1 LinkToB LinkToC LinkToD def host 2 LinkToB LinkToC LinkToD xyz host 1 LinkToB LinkToC LinkToD   I have 3 other dashboards (B,C,D). I want to click "LinkToX" to link to X dashboard. However, in Splunk Dashboard Studio UI, I can only link the table to one dashboard. Is there any way to configure JSON to make the table able to link to multiple dashboard? Or is there any way to make cells in table become clickable URL link instead? Thank you! ... View more

I have a data visualized as a table.  name value time App1 123 5s App2 0 2s App3 111 10s   I know that drilldown option can be used to go through other pages and pass tokens to other dashboard. Currently I set clicking a row will open Value dashboard. However, is there any way that I can drilldown to multiple dashboards based on which column I clicked? (e.g. Clicking value column sends to Value dashboard, clicking name column sends to Name dashboard, etc)? ... View more