How could I exclude the selected fields like "host", "source","sourcetype" in the event column which is displayed on the

[Jennifer]

Hi, all!

I wish to display the event without the fields like "host", "source", and "sourcetype" like the photo below on my dashboard.

But when I save it as a dashboard, it still shows these fields! 

How could I solve the problem?

[johnhuang]

| table _time _raw

[gcusello · Accepted solution]

Hi @Jennifer,

You have two ways:

• in the bottom of each event, the selected fields are displayed, if you don't want to display them you have to delesct them in the left side of your form.
• You could also display them in raw form so you haven't the selected fields.

But think carefully to this because host ans sourcetype are very relevant fields for your analysis.

Ciao.

Giuseppe

[gcusello]

Hi @Jennifer,

good for you, see next time!

Ciao and happy splunking.

Giuseppe

P.S.: Karma Points are appreciated 😉