How would I do this?
The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.
Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.
Forums: SplunkPreview: removing the flash widget from the search results page
Previous Topic: Top events groupd by device | Next Topic: truncating multi-line events at 500 lines
Posts 1–2 of 2
You will have to edit and customize the Advanced XML view, by copying $SPLUNK_HOME/etc/apps/search/default/data/ui/views/flashtimeline.xml to $SPLUNK_HOME/etc/apps/search/local/data/ui/views/flashtimeline.xml, then editing the copy. The copy will take precedence. However, be warned that the Advanced XML somewhat complex, and you should read the developer docs to understand how it works first: http://www.splunk.com/base/Documentation/latest/Developer/ViewIntro