A few different queries / methods to list all fields for indexes.
|
1 |
index=yourindex| fieldsummary | table field |
|
1 |
index=yourindex | stats values(*) AS * | transpose | table column | rename column AS Fieldnames |
|
1 |
index=yourindex | stats dc() as * | transpose |
|
1 |
index=yourindex | table * |
index=your_index
| fieldsummary
| fields field values
It may just be on my instance but when using the fieldsummary command, the distinct count of values returned truncates to 500. There may be a limit configuration adjustment somewhere that would accommodate this.