Dashboards & Visualizations

Data Table field changes for Dashboards

jasonhblackwell
Explorer

Splunk Dashboard newbie here and so far no search has yielded an answer. Right now I am building a Dashboard for management using the Data table Panel type. Right now the tables are showing the fields: times, host, index, source, sourcetype. I need the data tables to display some of my custom fields. This sounds very easy so I assume I am just missing something. Is this possible?

Tags (1)
0 Karma
1 Solution

Genti
Splunk Employee
Splunk Employee

try adding the

<fields>_time, host, source, sourcetype, field1, field2,etc..</fields>

attribute right under the search that populates the dashboard.
see if this helps

View solution in original post

0 Karma

thall79
Communicator

If you can post the XML you are using. Travis.

0 Karma

Genti
Splunk Employee
Splunk Employee

try adding the

<fields>_time, host, source, sourcetype, field1, field2,etc..</fields>

attribute right under the search that populates the dashboard.
see if this helps

0 Karma

Genti
Splunk Employee
Splunk Employee

Glad that worked! Cheers! 🙂

0 Karma

jasonhblackwell
Explorer

Thank you Genti! I knew it would be something easy. 😛

0 Karma
Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...

Federated Search for Amazon S3 | Key Use Cases to Streamline Compliance Workflows

Modern business operations are supported by data compliance. As regulations evolve, organizations must ...