Splunk Search

What is the difference between event listing and tables in a Dashboard?

AntonioM
Explorer

Hello All,

I was wondering what is the difference between an event listing and a table? What is shown in an event listing panel? The reason I ask is because I am trying to make a dashboard and was wondering which is the best panel to use.

Thanks!

Tags (2)
0 Karma

rroberts
Splunk Employee
Splunk Employee

Event Listing is literally a list of raw events i.e. :

Thu Aug 09 11:11:15 info MID 2449857 Subject critical

Thu Aug 09 11:11:11 info MID 2449857 Subject critical

Thu Aug 08 11:11:11 info MID 2449857 Subject critical

Table field values are displayed by column:

_time _raw source

Aug 8 info MID /opt/log/my.log

Aug 8 info MID /opt/log/my.log

Aug 8 info MID /opt/log/my.log

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...