"All Fields" do not show the "GrandTotal" . Coverage option is 100%. if fast mode does not perform field discovery
why did "Total" showed before but it no longer shows up under interesting fields? There are over 8,000 events returned from the search. Perhaps something got changed and I need to reset my splunk environment. Thanks!
I think I see my issue. Coverage option should be changed to "All Fields". Now I can see "GrandTotal"! Thanks!
... View more