topic 'Show Source' in the search events in Splunk Search

'Show Source' in the search events

TestQA52 — Thu, 27 May 2021 15:50:10 GMT

I am searching for logs, and when I click on 'Show source' they are more logs associated with it

Is there a way to have these other logs to show in the events? I cannot format Show Source as easily as the search events

aasabatini — Thu, 27 May 2021 16:01:53 GMT

try metadata command, it's really easier to check sources, sourcetypes and hosts

example for the sources:

| metadata type=sources

TestQA52 — Thu, 27 May 2021 16:20:52 GMT

@aasabatini Hey, thank you. Im very new to Splunk

Sometext| metadata type=sources

I'm getting: or in 'metadata' command: This command must be the first command of a search

metadata type=sources | Sometext

It says Sometext is not a command

aasabatini — Fri, 28 May 2021 05:51:09 GMT

please read the documentation

anyway run the search like this

| metadata type=sources index=<your index> splunk_server=<your server>