Why am I getting "Source not available..." when selecting the Show Source option for an event?

[bharathkumarnec]

Hi All,

I am frequently getting the message below while selecting show source option available for the event:

Source not available for this event.

What does this mean and how to resolve this issue?

[bohanlon_splunk]

https://answers.splunk.com/answers/111566/show-source-not-available.html

Solution: Making sure the search is well finalized before getting to source of an result/event.

[muebel]

could you attach a screenshot of what you are seeing?

[bharathkumarnec]

Hi,

It is a simple message stating "Show Source not available for this event"

[somesoni2]

What type of log that you're viewing?

[bharathkumarnec]

Hi,

Log type is Log4j.