I have a report defined as a search on a particular index.
The report is pretty much the search for "index=some_index".
When I connect to Splunk ODBC, I only get a few of the field extractions that I have defined for the source type that is feeding data into this index.
Any ideas on what steps to take to troubleshoot this?
I am getting what I believe to be a similar issue: missing fields when connecting to a report using the Splunk ODBC driver within Tableau Desktop. Clean installs of the driver & Tableau did not solve the issue. Anyone else experiencing this?