All Apps and Add-ons

Splunk dash-board - How to show extracted fields on the left like when you search

cyler
New Member

When I do a normal search I see the extracted fields on the left.

alt text

In the dashboard that I am creating, how do I show that info too?

Here is my dashboard - the extracted feilds are not showing on the left;

alt text

0 Karma

PowerPacked
Builder

Hi @cyler

You can show values of only one field not all the fields & in your scenario its Hostname Values.

The Box your are showing in the dashboard is Input Tab where you give the Input and Dashboard or Form populates based on the Input you given in that tab.

Thanks

0 Karma

PowerPacked
Builder
add this to Dashboard XML to get the Hostname values as dropdown

  <label>Select a hostname :</label>
  <choice value="null">Choose hostname</choice>
    <query>Your search | stats count by hostname | sort hostname</query>
  </search>
  <fieldForLabel>hostname</fieldForLabel>
  <fieldForValue>hostname</fieldForValue>
</input>
0 Karma

Sukisen1981
Champion

Your request is not clear, why would you want the dashboard to show extracted fields on the left?
This is not an expected behaviour in a dashboard.
When you search on the default search app, you get a result of all events matching your search, a dashboard is something different, it is more of a UI to end users to view extracted events (and add more sense to them!) by building charts, tables etc.
I suspect though your use case is something else....can you please elaborate?

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...