I would like to know how to insert thumbnail images into events in the flashtimeline. For example, given that there is URL of the thumbnail in each event and it has a field name "img". An sample event looks like this:
[valid timestamp]
img = http://nt0.ggpht.com/news/tbn/zBjXtPTcrc5CPM/0.jpg
How should I further construct my search string?
index=<index_name> | ...
I think the only way to do this would be to create your own custom event renderer with CSS: http://www.splunk.com/base/Documentation/latest/Developer/EventRendering
I don't think you want to use "iconify".
index=<index_name> | iconify img
because it's only showing small distinct shaped and colored icons for each img