https://community.splunk.com/t5/Reporting/How-to-show-raw-data-in-reports/m-p/281152#M5314 <P>It's work fine to me...</P> Fri, 22 Feb 2019 17:00:34 GMT spitinfra 2019-02-22T17:00:34Z https://community.splunk.com/t5/Reporting/How-to-show-raw-data-in-reports/m-p/281150#M5312 <P>Hi,</P> <P>I index processed data into Splunk and my client might need to view the raw data file that is used to produce events as well.<BR /> Let's say, I am using xml and prepare a comma separated line from the file and index it in Splunk. Is there something that I can set in configuration so that the user sees the raw file that is used to produce the event?</P> Wed, 16 Dec 2015 16:27:17 GMT https://community.splunk.com/t5/Reporting/How-to-show-raw-data-in-reports/m-p/281150#M5312 sdaruna 2015-12-16T16:27:17Z https://community.splunk.com/t5/Reporting/How-to-show-raw-data-in-reports/m-p/281151#M5313 <P>You can display the raw data and the path of the file that generated the event using the following:</P> <PRE><CODE>[yoursearchhere] | table _raw, source </CODE></PRE> <P>Is that what you need?</P> <P>Thanks,<BR /> J</P> Wed, 16 Dec 2015 16:55:45 GMT https://community.splunk.com/t5/Reporting/How-to-show-raw-data-in-reports/m-p/281151#M5313 javiergn 2015-12-16T16:55:45Z https://community.splunk.com/t5/Reporting/How-to-show-raw-data-in-reports/m-p/281152#M5314 <P>It's work fine to me...</P> Fri, 22 Feb 2019 17:00:34 GMT https://community.splunk.com/t5/Reporting/How-to-show-raw-data-in-reports/m-p/281152#M5314 spitinfra 2019-02-22T17:00:34Z https://community.splunk.com/t5/Reporting/How-to-show-raw-data-in-reports/m-p/281153#M5315 <P>It's work to me</P> Fri, 22 Feb 2019 17:03:01 GMT https://community.splunk.com/t5/Reporting/How-to-show-raw-data-in-reports/m-p/281153#M5315 spitinfra 2019-02-22T17:03:01Z