Getting Data In

Why am I getting "Source not available..." when selecting the Show Source option for an event?

bharathkumarnec
Contributor

Hi All,

I am frequently getting the message below while selecting show source option available for the event:

Source not available for this event.

What does this mean and how to resolve this issue?

0 Karma

bohanlon_splunk
Splunk Employee
Splunk Employee

https://answers.splunk.com/answers/111566/show-source-not-available.html

Solution: Making sure the search is well finalized before getting to source of an result/event.

0 Karma

muebel
SplunkTrust
SplunkTrust

could you attach a screenshot of what you are seeing?

0 Karma

bharathkumarnec
Contributor

Hi,

It is a simple message stating "Show Source not available for this event"

0 Karma

somesoni2
SplunkTrust
SplunkTrust

What type of log that you're viewing?

0 Karma

bharathkumarnec
Contributor

Hi,

Log type is Log4j.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...