Splunk Search

Index appearing in Interesting fields

palisetty
Communicator

Why is that Index field doesn't appear in Selected Fields? It is appearing in interesting fields. index="homework_host_index" source="homeworkdataset.csv" host="Homework_Host" sourcetype="csv" #splunk. What are the conditions it would appear so?

Tags (1)
0 Karma

to4kawa
Ultra Champion

smart mode

check right: Smart mode.

0 Karma

to4kawa
Ultra Champion

If you have to search in smart mode and do not come out, you will have to do field extraction yourself.

palisetty
Communicator

can you please make it clearer for a newbie like me

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...