<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How should I dynamically change the limit parameter in the head command in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-should-I-dynamically-change-the-limit-parameter-in-the-head/m-p/326394#M21101</link>
    <description>&lt;P&gt;do a drop down and pass the entire command, not just the value, like this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;input type="dropdown" token="count_filter"&amp;gt;
  &amp;lt;label&amp;gt;Limit your Results&amp;lt;/label&amp;gt;
  &amp;lt;choice value=""&amp;gt;ALL (no filter)&amp;lt;/choice&amp;gt;
  &amp;lt;choice value="| head 10"&amp;gt;10&amp;lt;/choice&amp;gt;
  &amp;lt;choice value="| head 20"&amp;gt;20&amp;lt;/choice&amp;gt;
  &amp;lt;default&amp;gt;All (no filter)&amp;lt;/default&amp;gt;
&amp;lt;/input&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Then the last line of your search should be &lt;CODE&gt;$count_filter$&lt;/CODE&gt; (without a leading pipe).  This way you do not need that "huge number" aspect.&lt;/P&gt;</description>
    <pubDate>Sat, 03 Jun 2017 16:35:18 GMT</pubDate>
    <dc:creator>woodcock</dc:creator>
    <dc:date>2017-06-03T16:35:18Z</dc:date>
    <item>
      <title>How should I dynamically change the limit parameter in the head command</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-should-I-dynamically-change-the-limit-parameter-in-the-head/m-p/326392#M21099</link>
      <description>&lt;P&gt;I have a search command which pipes to "| head limit=10". But I want to let the user decide if they see 10 or 20 or all the events returned. &lt;/P&gt;

&lt;P&gt;One way that I could think of was by adding a drop-down with specific values such as 10, 20 and 999,999,999(very large number) and by passing that value as the limit of the head command. I wonder if there's a better way to do this though.&lt;/P&gt;</description>
      <pubDate>Fri, 02 Jun 2017 20:57:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-should-I-dynamically-change-the-limit-parameter-in-the-head/m-p/326392#M21099</guid>
      <dc:creator>vaguiar</dc:creator>
      <dc:date>2017-06-02T20:57:52Z</dc:date>
    </item>
    <item>
      <title>Re: How should I dynamically change the limit parameter in the head command</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-should-I-dynamically-change-the-limit-parameter-in-the-head/m-p/326393#M21100</link>
      <description>&lt;P&gt;You could just use a text box with the header of "result count (enter whole number)" and use that token if you want them to get the number of results they desire. &lt;/P&gt;</description>
      <pubDate>Fri, 02 Jun 2017 22:34:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-should-I-dynamically-change-the-limit-parameter-in-the-head/m-p/326393#M21100</guid>
      <dc:creator>cmerriman</dc:creator>
      <dc:date>2017-06-02T22:34:22Z</dc:date>
    </item>
    <item>
      <title>Re: How should I dynamically change the limit parameter in the head command</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-should-I-dynamically-change-the-limit-parameter-in-the-head/m-p/326394#M21101</link>
      <description>&lt;P&gt;do a drop down and pass the entire command, not just the value, like this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;input type="dropdown" token="count_filter"&amp;gt;
  &amp;lt;label&amp;gt;Limit your Results&amp;lt;/label&amp;gt;
  &amp;lt;choice value=""&amp;gt;ALL (no filter)&amp;lt;/choice&amp;gt;
  &amp;lt;choice value="| head 10"&amp;gt;10&amp;lt;/choice&amp;gt;
  &amp;lt;choice value="| head 20"&amp;gt;20&amp;lt;/choice&amp;gt;
  &amp;lt;default&amp;gt;All (no filter)&amp;lt;/default&amp;gt;
&amp;lt;/input&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Then the last line of your search should be &lt;CODE&gt;$count_filter$&lt;/CODE&gt; (without a leading pipe).  This way you do not need that "huge number" aspect.&lt;/P&gt;</description>
      <pubDate>Sat, 03 Jun 2017 16:35:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-should-I-dynamically-change-the-limit-parameter-in-the-head/m-p/326394#M21101</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2017-06-03T16:35:18Z</dc:date>
    </item>
    <item>
      <title>Re: How should I dynamically change the limit parameter in the head command</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-should-I-dynamically-change-the-limit-parameter-in-the-head/m-p/326395#M21102</link>
      <description>&lt;P&gt;Good point and it let's me select a default value as well. Thanks!&lt;/P&gt;</description>
      <pubDate>Tue, 06 Jun 2017 22:42:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-should-I-dynamically-change-the-limit-parameter-in-the-head/m-p/326395#M21102</guid>
      <dc:creator>vaguiar</dc:creator>
      <dc:date>2017-06-06T22:42:51Z</dc:date>
    </item>
  </channel>
</rss>

