Splunk Enterprise Security

ES: Add a Carriage Return to "Description"

proletariat99
Communicator

In enterprise security correlation searches / notable events, I'd like to add a carriage return to the Description field so that non-asset information on fields is readily available and easy to read.

Does anyone know how to add a carriage return to the Description field in an ES Correlation Search?

proletariat99
Communicator

nope... still doesn't work, last I checked.

0 Karma

jsven7
Communicator

Yeah this feature would be great.

0 Karma

AndySplunks
Communicator

Ever figure out a solution to this?

0 Karma

jsven7
Communicator

Still needing this.

Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...