How can I define different export fields set of the "FieldPicker" for different apps?

[William]

For example, I want to only display "host", "sourcetype" for an app A in the default search result of "Events Table", but only "source", "eventtype" for app B. How can I do this?

[William]

yes. i have found the answer. thanks.

[William · Accepted solution]

the default fields set is defined by the viewstates.conf whose path is

$Splunk\etc\users\USER_NAME\APP_NAME\local\viewstates.conf

and it is controlled by the FieldPickers as follows

[flashtimeline:_current] FieldPicker_0_6_1.fields = ...

[jrodman]

Are you talking about having a set of default selected fields by app?