Splunk Search

Fieldset disappears when using table command

JoeSco27
Communicator

I have recently upgraded from 4.3 to the latest 5.x version. I found that now when I use the table command the fieldset on the left hand side disappears and I cant click on the selector to go from tableView to the raw log events. I frequently use a macro that puts the fields into a table by the headers I have chosen, and I get value out of this because I can use the fieldset to narrow the search. Is this a bug or is there a way around this for 5.X

Thank you.

Tags (3)
0 Karma
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

alacercogitatus
SplunkTrust
SplunkTrust

You will want to change the "Smart Mode" to "Verbose Mode".

http://docs.splunk.com/Documentation/Splunk/5.0.5/Search/Changethesearchmode

JoeSco27
Communicator

Thank you!

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...