Is there a way to do this in the generic search results? AKA not via a dashboard? No matter what I put in the field value it only lets me click it say "include/exclude in search results" and I'm thinking there's no way to override this. <link> - No <a href="> No http://whatever No
... View more
Sure you can. You already had the answer here. https://community.splunk.com/t5/Splunk-Search/How-do-you-list-top-items-for-each-group/m-p/328349/highlight/true#M97747
... View more