Dashboards & Visualizations

Event Action ---> Show Source: To be displayed on dashboard

Ananya_23
Loves-to-Learn Lots

Hi I have a unique request where I want to display the Event Actions -- > Show Source link to be displayed on the dashboard instead of drilling down by opening the query -- > event and then ---> show source.

Capture1.PNG

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Ananya_23 ,

you have two choices:

display the raw events (it's usually the first choice in the display options) or use _raw as field in a table visualization.

Ciao.

Giuseppe

0 Karma

Ananya_23
Loves-to-Learn Lots

Hi @gcusello 
_raw
gives me all the details of that particular event agreed.
But here I want to display the "Show Source" link to be displayed on the dashboard

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Ananya_23 ,

the only way is adding a JS that makes the same thing, but I cannot help you because I'm not so strong in JS development.

A simpler way is to add an option: display _raw that adds the _raw field to the table command and displays it.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

ATTENTION!! We’re MOVING (not really)

Hey, all! In an effort to keep this Slack workspace secure and also to make our new members' experience easy, ...

Splunk Admins: Build a Smarter Stack with These Must-See .conf25 Sessions

  Whether you're running a complex Splunk deployment or just getting your bearings as a new admin, .conf25 ...

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...