I’ve run into this too, especially with really long field names in the UI. One workaround that helped me was copying the field name directly from the Inspect / Developer Tools in the browser instead of dragging it from the page. Another option is to use Splunk’s field picker or | fields / | table commands to reference the field name and copy it from the search bar output, where it’s fully visible. It’s not perfect, but it’s a lot less painful than trying to mouse-highlight a truncated field. ... View more