Why after trying to show the source of an event, Splunk shows only "loading ..."?

[Anud]

Hello,

If I try to show the source of an event, splunk shows only "loading ...".
I took care, that the result is finalized.

We are using Splunk 8.0.8.

Edit:
I start a search with "index=..." and "source=.."
I open an event -> event actions -> show source 
Now the loading screen will not display any result/source, just "loading ...." 

[gcusello · Accepted solution]

Hi @Anud,

I found that also in the version I'm using (8.2.4) it's very slow visualization, but you don't need to use this function to see the row event, you can use the dropdown (default "List") selecting "Raw events".

To have a quicker answer, you could try to limit the number of results addinf, after the main search, "| head 10".

Ciao.

Giuseppe

[Anud]

thank you

[gcusello]

Hi @Anud,

good for you, see next time!

Ciao and happy splunking.

Giuseppe

P.S.: Karma Points are appreciated 😉