Getting Data In

How can I open the source file belonging to an Event.

devcs
Engager

If I run a search and then go to one of the Events in the search results, when I click the Source, I get a window with 3 options: Add to Search, Exclude from Search, and New Search. When I last used Splunk, many versions ago, I was able to open the actually source log file that belonged to an Event. Is there still away to do this?

Thank you

Tags (2)
0 Karma
1 Solution

glennpierce
Explorer

Hi devcs,

If you expand the event (drop down the ">"), then drop down Event Actions, in there you should see "Show Source".

View solution in original post

glennpierce
Explorer

Hi devcs,

If you expand the event (drop down the ">"), then drop down Event Actions, in there you should see "Show Source".

nagaraju_chitta
Path Finder

Hi glennpierce ,

How to disable the "Show source" from Event Actions?

0 Karma
Get Updates on the Splunk Community!

There's No Place Like Chrome and the Splunk Platform

Watch On DemandMalware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

The Great Resilience Quest: 5th Leaderboard Update

The fifth leaderboard update for The Great Resilience Quest is out >> 🏆 Check out the ...

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...