Dashboards & Visualizations

Data Table field changes for Dashboards

jasonhblackwell
Explorer

Splunk Dashboard newbie here and so far no search has yielded an answer. Right now I am building a Dashboard for management using the Data table Panel type. Right now the tables are showing the fields: times, host, index, source, sourcetype. I need the data tables to display some of my custom fields. This sounds very easy so I assume I am just missing something. Is this possible?

Tags (1)
0 Karma
1 Solution

Genti
Splunk Employee
Splunk Employee

try adding the

<fields>_time, host, source, sourcetype, field1, field2,etc..</fields>

attribute right under the search that populates the dashboard.
see if this helps

View solution in original post

0 Karma

thall79
Communicator

If you can post the XML you are using. Travis.

0 Karma

Genti
Splunk Employee
Splunk Employee

try adding the

<fields>_time, host, source, sourcetype, field1, field2,etc..</fields>

attribute right under the search that populates the dashboard.
see if this helps

0 Karma

Genti
Splunk Employee
Splunk Employee

Glad that worked! Cheers! 🙂

0 Karma

jasonhblackwell
Explorer

Thank you Genti! I knew it would be something easy. 😛

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...