data "explorer" dashboard

[hire-vladimir]

Indexes and Fields Available Indexes | tstats values(sourcetype) AS st where index=* by index | fields - st Available Sourcetypes | tstats values(sourcetype) AS st where index=$index$ by sourcetype | fields - st <title>Available Fields and Values for Index: $index$ and Sourcetype: $sourcetype$</title> index=$index$ sourcetype=$sourcetype$ | fieldsummary maxvals=1 | rex field=values "value\"\:\"(?<Sample_Value>.+)\"\," | eval index="$index$" | eval sourcetype="$sourcetype$" | where Sample_Value!="" |fields field Sample_Value index sourcetype | stats list(field) AS "Field Name" list(Sample_Value) AS "Sample Value" by index sourcetype0 true false none cell