Dashboards & Visualizations

How to show more selected fields on dashboard event panel

Lgo
Explorer

Hi There,

I have a dashboard I've created to explore XML trace transactions, it works fine, but when trying to find specific parts of the transaction I have to open each event and check if its the correct part, to make it easier I want to be able to include extra selected fields to show the description of the xml event.

I have extracted this field, but cant get it to show on the dashboard, it shows correctly when viewing it in search.

Query is sourcetype=[sourcetype] Description=* ActivityID=[activityid]

It currently shows like this on the dashboard

alt text

But I want it to show like this:
alt text

0 Karma
1 Solution

spayneort
Contributor

add this to your dashboard:

<fields>Description, host, source, sourcetype</fields>

See here for example:

http://docs.splunk.com/Documentation/Splunk/7.0.0/Viz/PanelreferenceforSimplifiedXML#event

View solution in original post

spayneort
Contributor

add this to your dashboard:

<fields>Description, host, source, sourcetype</fields>

See here for example:

http://docs.splunk.com/Documentation/Splunk/7.0.0/Viz/PanelreferenceforSimplifiedXML#event

Lgo
Explorer

Thank you, that worked perfectly!

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...