Custom fields to be extracted from the Odata for splunk app

[giridhar_tm]

This is a question on the OData App.

I have a search that lists the output as a table, when I save this search and access it using the odata app from excel or tableau...i get an error. [internal server error]

when the search does not output a table and i access it using odata link...the data gets extracted from splunk.

my question: Doesnt the OData app support, table contents and the required fields to be extracted?

[Neeraj_Luthra]

If you are adding something like '| table field1, field2 ...' at the end of your saved search query, using its OData endpoint should only display those specific fields in Excel or Tableau. The app should honor the output as you see in the web.

[ineeman]

Can you give an example of a search that fails and one that doesn't? If you can do it on the _internal index, that'd be great, as then it is easy to replicate.