Hello,
If I try to show the source of an event, splunk shows only "loading ...".
I took care, that the result is finalized.
We are using Splunk 8.0.8.
Edit:
I start a search with "index=..." and "source=.."
I open an event -> event actions -> show source
Now the loading screen will not display any result/source, just "loading ...."
Hi @Anud,
I found that also in the version I'm using (8.2.4) it's very slow visualization, but you don't need to use this function to see the row event, you can use the dropdown (default "List") selecting "Raw events".
To have a quicker answer, you could try to limit the number of results addinf, after the main search, "| head 10".
Ciao.
Giuseppe
Hi @Anud,
I found that also in the version I'm using (8.2.4) it's very slow visualization, but you don't need to use this function to see the row event, you can use the dropdown (default "List") selecting "Raw events".
To have a quicker answer, you could try to limit the number of results addinf, after the main search, "| head 10".
Ciao.
Giuseppe
thank you
Hi @Anud,
good for you, see next time!
Ciao and happy splunking.
Giuseppe
P.S.: Karma Points are appreciated 😉