Add an event listing
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Add an event listing
Use the event listing panel to display search results on your dashboard. This panel is a great way to showcase certain events in your index. You can also use it to show realtime streaming events as they come in, if you use a real time search.
Configure the event listing panel
The following basic example shows how to add an event listing to the dashboard you've been building. Use the events tag to add a list of events to your dashboard.
<dashboard> <label>My dashboard</label> <row> <event> <title>Events</title> <searchString>changelist | head 1000 | dedup changelist</searchString> <fields>added deleted changed</fields> <option name="showPager">true</option> <option name="count">20</option> <option name="displayRowNumbers">false</option> </event> </row> </dashboard>
Configure event listing specific options
You can set other configuration options that are only available for event listing panels, such as
count = integer
- The maximum number of rows to display.
displayRowNumbers = true | false
- Toggle whether row numbers are shown to the left of results.
entityName = events | results
- Toggle whether to show events or results. Events are individual events, while results are created by statistical operators.
- Defaults to results.
segmentation = none | inner | outer | full
- Set the segmentation of events displayed. This affects what you can and can't click on within the event.
maxLines = integer
- The maximum number of lines to display for each result/event.
showPager = true | false
- Toggle pagination on or off.
This documentation applies to the following versions of Splunk: 4.1 , 4.1.1 , 4.1.2 , 4.1.3 , 4.1.4 , 4.1.5 , 4.1.6 , 4.1.7 , 4.1.8 View the Article History for its revisions.