I have a csv file having 5 columns but I want to display only 3 columns..how can I limit the columns in the report.
While querying to index a column _time is coming with the report. I dont want this column, Can I remove this column from the report anyhow ?
You can remove fields by appending this to your search:
... | fields - field4 field5
Alternatively, you can list the fields you want in a table:
... | table field1 field2 field3
View solution in original post
Thanks Martin..it worked both solutions 🙂