Hi @herguzav , ESCu Correlation Search don't need additional fields, but you can customize your Correlation Searches adding fields to the Search and eventually to the Data Model. But anyway, the correct approach is the one I described: you must start from the requisites and eventualli define customizations. Ciao. Giuseppe ... View more

As I said, I cannot see that information (inputs1-15) on SC side anymore. Earlier this was stored to customer cloud stack, but now I expecting that this information is currently forwarder to Splunk Clouds' admin stack or somewhere else where Customers haven't access? I think that you haven't any other option than create a support ticket to Splunk and ask that they solve this issue. ... View more