So you'll need to open file "etc/apps/Splunk_SA_CIM/bin/modaction_adhoc_rest_handler.py". And add to line 561. 'preview': 'false',   Basically you'll want the code block to look like this: args = { 'output_mode': 'json', # CIM-944: adhoc_search_level essential to proper field extraction 'adhoc_search_level': 'verbose', 'preview': 'false', 'search': search }  Restart afterwards - This worked from me, kudos to @ebond_splunk  ... View more

@Pcktech  Hi! This issue was fixed in 6.4.1. Happy Splunkin! ... View more

Also Also, theres a new version of the Splunk Tour Creation App (v3) which may help you... ... View more

Is this still applicable? It doesn't seem to work in my case. I appended the "-tour" suffix to the ID of the dashboard, but it doens't start when I view the dashboard. (Tried it with a test user) ... View more