Docs » Splunk Log Observer Connect » Display a field separately in the log details flyout

Display a field separately in the log details flyout 🔗

The log details flyout in Log Observer always displays the message field in a standalone section called MESSAGE at the top of the log details flyout.

This image shows the location of the message field in a separate section at the top of the log details flyout.

Your team can choose to display any field of your choice in the MESSAGE section. To display a field of your choice separately, alias the desired field to the message field. See Create field aliases to learn how.

For example, say your team most frequently uses the summary field. Add an alias for the summary field called message. The summary field still exists but is also known as message and appears in the MESSAGE section of the log details flyout.

This page was last updated on Oct 03, 2024.