For example, I want to only display "host", "sourcetype" for an app A in the default search result of "Events Table", but only "source", "eventtype" for app B. How can I do this?
the default fields set is defined by the viewstates.conf whose path is
and it is controlled by the FieldPickers as follows
FieldPicker_0_6_1.fields = ...
View solution in original post
yes. i have found the answer. thanks.
Are you talking about having a set of default selected fields by app?