Splunk Enterprise Security

ES: Add a Carriage Return to "Description"

proletariat99
Communicator

In enterprise security correlation searches / notable events, I'd like to add a carriage return to the Description field so that non-asset information on fields is readily available and easy to read.

Does anyone know how to add a carriage return to the Description field in an ES Correlation Search?

proletariat99
Communicator

nope... still doesn't work, last I checked.

0 Karma

jsven7
Communicator

Yeah this feature would be great.

0 Karma

AndySplunks
Communicator

Ever figure out a solution to this?

0 Karma

jsven7
Communicator

Still needing this.

Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...