Manage the Fields Displayed in Search Results

You must have the Manage Fieldsets permission.

You can specify a fieldset that determines a group of search result fields (such as IP address, URL, etc.) that the system displays in the search Results Table. In the table, each field can provide the ten most and less common values. Multiple searches can share a fieldset, and new searches display a default fieldset that contains the most common event fields. Use the fieldsets window to view and add the customize and system fieldsets, including lookup lists.

System Fieldsets: Predefined fieldsets provided by the system.
My Fieldsets: Customize the default fieldsets and lookup list fields for individual purposes.

New searches display the user´s default fieldset. These will remain selected in the fieldsets list box even when moving to other search tabs. If you select another fieldset, the pop-up window closes to display the new option. You can revert the change to the previously selected fieldset.

Whenever you replace or update the fieldset, your search becomes out of sync, since the fields shown might differ from the new selection. Rerun the search with the new selection to correct this.