Table Property Reference

In the widget's side panel (Figure 195, “Widget menu options”), click the settings icon and the style icon to configure the following properties.

  • Title

    The title of the widget as displayed in the dashboard.

  • Description

    The description of the table. This is free form text supporting markdown syntax. The description appears in the dashboard as a tooltip when hovering over the question mark on top of the widget.

In the widget's side panel (Figure 195, “Widget menu options”), click the style icon to configure the following properties:

  • General contains settings that apply to the entire table.

    • Cell overflow allows you to control how the content is displayed when it exceeds the available space within a cell (for example, cells with @rawstring values). Available options:

      • Wrap ensures that the text content automatically adjusts its layout to fit the column width. This is especially useful for displaying long text and avoiding horizontal scrolling.

      • Truncate every line truncates multiline text content in a cell so that each line is shortened to fit the available space.

      • Truncate as one line renders the text as one line and truncates overflowing text.

    • Show row numbers displays row numbers in the table.

    • Group fields by prefix

      Groups fields based on their first level prefix. A prefix is any string followed by a dot in the field name, as actor in actor.ip and actor.organizationId, for instance. This setting is automatically enabled when correlate() is used in the query, to support the output of this function and to display fields from the same event in a single column.

  • Columns lists all table's columns — select a column to edit its properties. Click the show/hide icon next to each column to toggle its visibility in the table. Hiding the column does not remove it from the query result, which means that the column is still available for export and can be referenced in the Template Language used for interactions.

  • Formatting sets the formatting for the selected column.

    • Show as:

      • Value shows the value as is. This setting will remove any existing links from the cell.

      • Go to events link. Triggers filter query with events matching the field value, meaning you can link the value to the corresponding event in the Event List. This is the default behavior for grouping fields returned by functions like groupBy() or top(). For an example, see Display Different Statuses.

    • Format as:

      • Bytes. Only applicable to number values, formats the data in bytes (B), kilobytes (kB), megabytes (MB), gigabytes (GB), etc. Example: number 1500000 will be displayed as 1.5 MB.

      • Number sets the appearance of number values:

        • Decimal places rounds the value to the number of decimal points.

        • Show thousands separator displays numbers with thousand separators. Example: 3,728.24.

      • Text shows value as is, no formatting applied.

      • Time Ago. Only applicable to number values, converts Unix timestamp with milliseconds in "Time ago" relative time. Example: 1y 60d 10h ago.

      • Time Duration. Only applicable to number values, interprets number values as milliseconds and displays the milliseconds elapsed as duration. Example: 12ms.

      • Date and Time. Only applicable to number values, interprets number values as milliseconds and formats cell values as timestamps. Example: yyyy-mm-dd hh:mi:ss

  • Size — controls size's adjustments to the column. Options are:

    • Fit to data — automatically adjusts column width to fit the data. This will ignore any Text overflow settings for this column.

    • Custom width — sets a static width of the column.

  • Cell colors sets the background color of cells in a column.

    • Type options are:

      • Static sets a static background color (or no color is set).

      • Thresholds allows to configure thresholds and to choose a predefined palette of colors (can be diverging colors or monochrome with different nuances) automatically assigned to thresholds. For example, light green applied to all values below 50, dark green for all above 100. You can modify the color for any threshold: this will turn the palette to a Custom palette. Multiple thresholds are supported. For an example, see Figure 222, “Properties Panel - Example 1”.

      • Conditions allows to assign a color to a value cell when a condition you have defined for that value is met. For example, all values in HTTP status column that contain 04 must be displayed in red. Multiple conditions are supported. For an example, see Figure 224, “Properties Panel - Example 2”.

        You can set the following conditions:

        • equals

        • not equals

        • contains

        • do not contain

        • starts with

        • ends with

        • is present

        • is not present — this is a special condition that allows to set a color for empty cells (where no value is shown).

See Table Widget Examples Gallery for some Styling panel examples.