Dashboards & Visualizations

Data Table field changes for Dashboards

jasonhblackwell
Explorer

Splunk Dashboard newbie here and so far no search has yielded an answer. Right now I am building a Dashboard for management using the Data table Panel type. Right now the tables are showing the fields: times, host, index, source, sourcetype. I need the data tables to display some of my custom fields. This sounds very easy so I assume I am just missing something. Is this possible?

Tags (1)
0 Karma
1 Solution

Genti
Splunk Employee
Splunk Employee

try adding the

<fields>_time, host, source, sourcetype, field1, field2,etc..</fields>

attribute right under the search that populates the dashboard.
see if this helps

View solution in original post

0 Karma

thall79
Communicator

If you can post the XML you are using. Travis.

0 Karma

Genti
Splunk Employee
Splunk Employee

try adding the

<fields>_time, host, source, sourcetype, field1, field2,etc..</fields>

attribute right under the search that populates the dashboard.
see if this helps

0 Karma

Genti
Splunk Employee
Splunk Employee

Glad that worked! Cheers! 🙂

0 Karma

jasonhblackwell
Explorer

Thank you Genti! I knew it would be something easy. 😛

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...