$ 0 0 I have seen responses to use custom JS, but is there anyway in Splunk to configure it without custom JS?