Hello,
I have uploaded only 3 different files into the search and reporting app. I went to pivot, I selected sourcetype as 'Split by Rows'. I am getting a lot of fields which include audittrail, kvstore, mongod, scheduler, splunkversion, splunk, splunkd_conf, etc. Why is that?
@richgalloway or any other, please help