Dashboards & Visualizations

Data Table field changes for Dashboards

jasonhblackwell
Explorer

Splunk Dashboard newbie here and so far no search has yielded an answer. Right now I am building a Dashboard for management using the Data table Panel type. Right now the tables are showing the fields: times, host, index, source, sourcetype. I need the data tables to display some of my custom fields. This sounds very easy so I assume I am just missing something. Is this possible?

Tags (1)
0 Karma
1 Solution

Genti
Splunk Employee
Splunk Employee

try adding the

<fields>_time, host, source, sourcetype, field1, field2,etc..</fields>

attribute right under the search that populates the dashboard.
see if this helps

View solution in original post

0 Karma

thall79
Communicator

If you can post the XML you are using. Travis.

0 Karma

Genti
Splunk Employee
Splunk Employee

try adding the

<fields>_time, host, source, sourcetype, field1, field2,etc..</fields>

attribute right under the search that populates the dashboard.
see if this helps

0 Karma

Genti
Splunk Employee
Splunk Employee

Glad that worked! Cheers! 🙂

0 Karma

jasonhblackwell
Explorer

Thank you Genti! I knew it would be something easy. 😛

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...