In the GUI I get results plus the fields: host, source, and sourcetype
Same search in the CLI I just get results, no fields (even when I ask for "fields":
# splunk search "reboot | fields + source, sourcetype, host"
I'm still very new to this, so I could be missing something really basic.
:-Dan
... View more