- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to create custom results?
msalghamdi
Path Finder
06-11-2023
02:17 AM
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
PickleRick

SplunkTrust
06-11-2023
02:44 AM
Just use makeresults to generate a block of text, then use multikv to split it into single rows/cols. If you want to add this to an existing report, use append.
But most probably it wil not make much sense if your report has other columns - it will not be a separate "legend" to the table. For that you'd have to create a dashboard with separate widgets - one for table, one for the legend (here you could probably just use static text)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
msalghamdi
Path Finder
06-11-2023
03:52 AM
thanks for the answer, the thing is whenever i create results, the same fields gets overwritten when i create multiple of it, please if you can create a search that would show it in a table id be thankful
