https://community.splunk.com/t5/Security/In-Splunk-Web-why-does-the-fields-sidebar-not-display-quot/m-p/375158#M9263 <P>Make sure that you are running in <CODE>smart</CODE> or <CODE>verbose</CODE> mode (not <CODE>fast</CODE>).<BR /> If a field is not present in at least 20% of the events, it is not "interesting" (by definition).</P> Fri, 30 Jun 2017 18:57:23 GMT woodcock 2017-06-30T18:57:23Z https://community.splunk.com/t5/Security/In-Splunk-Web-why-does-the-fields-sidebar-not-display-quot/m-p/375156#M9261 <P>How come I am in the search mode and I don't have an interesting fields sidebar. Sometimes it is there and sometimes it is not depending on the app I am running. Is there a configuration setting needed?</P> Fri, 30 Jun 2017 18:00:52 GMT https://community.splunk.com/t5/Security/In-Splunk-Web-why-does-the-fields-sidebar-not-display-quot/m-p/375156#M9261 dxw350 2017-06-30T18:00:52Z https://community.splunk.com/t5/Security/In-Splunk-Web-why-does-the-fields-sidebar-not-display-quot/m-p/375157#M9262 <P>It is possible two reasons</P> <P>1) Interesting fields wont show because of fast mode.<BR /> 2) Field coverage might be less than 1% </P> Fri, 30 Jun 2017 18:32:05 GMT https://community.splunk.com/t5/Security/In-Splunk-Web-why-does-the-fields-sidebar-not-display-quot/m-p/375157#M9262 sbbadri 2017-06-30T18:32:05Z https://community.splunk.com/t5/Security/In-Splunk-Web-why-does-the-fields-sidebar-not-display-quot/m-p/375158#M9263 <P>Make sure that you are running in <CODE>smart</CODE> or <CODE>verbose</CODE> mode (not <CODE>fast</CODE>).<BR /> If a field is not present in at least 20% of the events, it is not "interesting" (by definition).</P> Fri, 30 Jun 2017 18:57:23 GMT https://community.splunk.com/t5/Security/In-Splunk-Web-why-does-the-fields-sidebar-not-display-quot/m-p/375158#M9263 woodcock 2017-06-30T18:57:23Z