Kibana visualization - Specify fields returned from query in a panel

Hi,

I am pretty new to ELK but I've managed to setup a full stack and now just recently begun playing around with some visualization. This is my current dashboard:

My question is this: In the "FailedLogon" panel is there any way to specify which fields to display in the result? Right now I get the whole event. Instead I would like to display just the username and server.

Sorry if it is a newbie question, but I have not managed to find any good answers when I've searched.

Thanks in advance.

@rplus in order to achieve that, when creating the visualisation in the discover, you need to add the fields you are interested on. You can check in the image I will post below as example:

Cheers

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.