Customizing the Mission Control Menu Fields in Enterprise Security (ES 8)

Available Languages

Updated:September 30, 2026

Document ID:SPLK051235

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Applicability

Splunk Enterprise Security

Description

By default, the Mission Control menu displays the following fields: Title, ID, Type, Entity, Risk Score, Findings, Intermediate Findings, Time, Disposition, Urgency, Status, Owner, and Action.
Users can customize the menu to display only the fields they need.

Investigation

Even after removing these fields, they reappear when the user logs back into the Analyst Queue.

Resolution

To customize the Mission Control menu and follow the below steps:

Navigate to Splunk Enterprise Security -> Mission Control Panel.
Click the gear icon on the right side of the page.
In the table settings menu, select the fields to display, such as Title, ID, Type, Findings, Intermediate Findings, etc.
Click Apply to confirm the changes.
After applying, click Save under the Analyst Queue search bar to save the customization.
After clicking on the save button a popup page will open, now enter the saved view name and click on the save button to save the view.
Once the view is saved, click the saved views drop-down in the top right corner to select and load the saved view.

The following screenshot demonstrates the customized Mission Control menu, displaying only the relevant fields based on user preferences.