Getting Data In

Why am I getting "Source not available..." when selecting the Show Source option for an event?

bharathkumarnec
Contributor

Hi All,

I am frequently getting the message below while selecting show source option available for the event:

Source not available for this event.

What does this mean and how to resolve this issue?

0 Karma

bohanlon_splunk
Splunk Employee
Splunk Employee

https://answers.splunk.com/answers/111566/show-source-not-available.html

Solution: Making sure the search is well finalized before getting to source of an result/event.

0 Karma

muebel
SplunkTrust
SplunkTrust

could you attach a screenshot of what you are seeing?

0 Karma

bharathkumarnec
Contributor

Hi,

It is a simple message stating "Show Source not available for this event"

0 Karma

somesoni2
Revered Legend

What type of log that you're viewing?

0 Karma

bharathkumarnec
Contributor

Hi,

Log type is Log4j.

0 Karma
Get Updates on the Splunk Community!

SOC Modernization: How Automation and Splunk SOAR are Shaping the Next-Gen Security ...

Security automation is no longer a luxury but a necessity. Join us to learn how Splunk ES and SOAR empower ...

Ask It, Fix It: Faster Investigations with AI Assistant in Observability Cloud

  Join us in this Tech Talk and learn about the recently launched AI Assistant in Observability Cloud. With ...

Index This | How many sides does a circle have?

  March 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...