How to display a table that shows all rows without pagination?

marxsabandana — Wed, 22 May 2019 07:16:30 GMT

I need to display a table that will show all the rows without pagination. I have already tried using "showPager" option in XML but it just removed the pagination and still displays 100 rows only. Is there a way to set the row count to unlimited?

Re: How to display a table that shows all rows without pagination?

vnravikumar — Wed, 22 May 2019 07:51:32 GMT

Check my solution whether it helps you

https://answers.splunk.com/answers/726097/can-you-help-me-with-an-issue-with-dashboard-rows.html#answer-726848

Re: How to display a table that shows all rows without pagination?

niketn — Wed, 22 May 2019 15:01:54 GMT

[UPDATED Code works in 7.2.6 but not on 7.3.0]

Just found out that while this worked in 7.2.6, it does not work in 7.3.0. Something is broken because it does not work in intended way anymore. So, Simple XML JS extension will be required to read the $job.resultCount$ token and render table with same number of rows and hence remove pagination.

@marxsabandana try the following run anywhere dashboard example using Simple XML which gets the result count from the search result using default search token $job.resultCount$ that needs to be populated in the table,

 <done>
   <set token="tokRowsPerPage">$job.resultCount$</set>
 </done>

Then passes the count to the table option:

<option name="count">$tokRowsPerPage$</option>`

PS:
1) Post processing using search id srchForTbl has been used to get the result count from search and then add the dependency of token tokRowsPerPage to the table so that the table renders only after the token is set.
2) I have used | fields - $tokRowsPerPage$ for adding token dependency to the table search however, you can use comment macro instead.
3) If you know an upper limit of table with all the records you can set the same using <init> section to set the token in the dashboard and step 1 with post processing will not be required.
4) This would work on Splunk 6.5 or higher.
Following is the complete Simple XML code for the run anywhere example.

 <form>
  <label>Table Pagination</label>
  <search id="srchForTbl">
    <query>index=_internal sourcetype=splunkd log_level!=INFO
| timechart span=5m count by component limit=5 useother=f
| streamstats count as sno
| fields sno *</query>
    <earliest>-24h@h</earliest>
    <latest>now</latest>
    <sampleRatio>1</sampleRatio>
    <done>
      <set token="tokRowsPerPage">$job.resultCount$</set>
    </done>
  </search>
  <fieldset submitButton="false"></fieldset>
  <row>
    <panel>
      <input type="text" token="testTextBox" searchWhenChanged="true">
        <label>(Testing) Rows per page based on Search Result</label>
        <default>$tokRowsPerPage$</default>
      </input>
      <table>
        <search base="srchForTbl">
          <query>| fields - $tokRowsPerPage$</query>
        </search>
        <option name="count">$tokRowsPerPage$</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">none</option>
        <option name="percentagesRow">false</option>
        <option name="refresh.display">progressbar</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
</form>

Please try out and confirm!

topic How to display a table that shows all rows without pagination? in Splunk Search

How to display a table that shows all rows without pagination?

Re: How to display a table that shows all rows without pagination?

Re: How to display a table that shows all rows without pagination?