Getting Data In

How can I open the source file belonging to an Event.

devcs
Engager

If I run a search and then go to one of the Events in the search results, when I click the Source, I get a window with 3 options: Add to Search, Exclude from Search, and New Search. When I last used Splunk, many versions ago, I was able to open the actually source log file that belonged to an Event. Is there still away to do this?

Thank you

Tags (2)
0 Karma
1 Solution

glennpierce
Explorer

Hi devcs,

If you expand the event (drop down the ">"), then drop down Event Actions, in there you should see "Show Source".

View solution in original post

glennpierce
Explorer

Hi devcs,

If you expand the event (drop down the ">"), then drop down Event Actions, in there you should see "Show Source".

nagaraju_chitta
Path Finder

Hi glennpierce ,

How to disable the "Show source" from Event Actions?

0 Karma
Get Updates on the Splunk Community!

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

Customer Experience | Join the Customer Advisory Board!

Are you ready to take your Splunk journey to the next level? 🚀 We invite you to join our elite squad ...