Splunk Search

INTERESTING FIELDS missing in Search&Reporting app (default app)

pkumar9610
Explorer

HI Friends,

In Search&Reporting app (default app) when I search anything, I see only 3 INTERESTING FIELDS coming up and when I search same thing from other apps (custom apps) on same Search Head I am able to see 100+ FIELDS. I am seeing this issue from only last one week, not sure what caused this issue.

How can I get these fields back and fix it, can you please suggest ?

Tags (1)
0 Karma

woodcock
Esteemed Legend

The splunk settings that are causing the fields to exist are probably owned by those other apps but the permissions are set to App. You need to edit the permissions and change them to Global (AKA All Apps) so that it will take effect in any app.

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...