topic Re: Data Table field changes for Dashboards in Dashboards & Visualizations

Data Table field changes for Dashboards

jasonhblackwell — Thu, 09 Dec 2010 00:38:11 GMT

Splunk Dashboard newbie here and so far no search has yielded an answer. Right now I am building a Dashboard for management using the Data table Panel type. Right now the tables are showing the fields: times, host, index, source, sourcetype. I need the data tables to display some of my custom fields. This sounds very easy so I assume I am just missing something. Is this possible?

Re: Data Table field changes for Dashboards

Genti — Thu, 09 Dec 2010 01:57:40 GMT

try adding the

<fields>_time, host, source, sourcetype, field1, field2,etc..</fields>

attribute right under the search that populates the dashboard.
see if this helps

Re: Data Table field changes for Dashboards

thall79 — Thu, 09 Dec 2010 03:17:04 GMT

If you can post the XML you are using. Travis.

Re: Data Table field changes for Dashboards

jasonhblackwell — Thu, 09 Dec 2010 03:56:52 GMT

Thank you Genti! I knew it would be something easy. 😛

Re: Data Table field changes for Dashboards

Genti — Thu, 09 Dec 2010 09:12:16 GMT

Glad that worked! Cheers! 🙂