Re: ES: Add a Carriage Return to "Description"

proletariat99 · ‎06-09-2014

In enterprise security correlation searches / notable events, I'd like to add a carriage return to the Description field so that non-asset information on fields is readily available and easy to read.

Does anyone know how to add a carriage return to the Description field in an ES Correlation Search?

proletariat99 · ‎03-09-2017

nope... still doesn't work, last I checked.

jsven7 · ‎04-15-2020

Yeah this feature would be great.

AndySplunks · ‎03-09-2017

Ever figure out a solution to this?

jsven7 · ‎04-15-2020

Still needing this.

ES: Add a Carriage Return to "Description"

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Are you a member of the Splunk Community?

ES: Add a Carriage Return to "Description"

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever