Splunk Enterprise

How can I sort by Field Name in Lookup Editor APP

naknake
Observer

Hello?
It was sorted by clicking on the field name within the "Lookup Editor APP" that we used in the past, but not now... I'm working another company now... Do I need any other settings?

Labels (1)
Tags (1)
0 Karma

rnowitzki
Builder

Hi @naknake ,

Usually by right-click on the column -> "rename this column".
I guess that's what you used to do.  What is different now in the new company?

BR,
Ralph

 

--
Karma and/or Solution tagging appreciated.
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...