topic Re: Using 'by' clause overrides 'limit'? in Splunk Search https://community.splunk.com/t5/Splunk-Search/Using-by-clause-overrides-limit/m-p/479514#M134390 <P>Have you tried <CODE>top limit=5 product_name price by Code</CODE> or <CODE>top 5 product_name price by Code</CODE>?</P> Mon, 06 Jan 2020 12:11:15 GMT richgalloway 2020-01-06T12:11:15Z Using 'by' clause overrides 'limit'? https://community.splunk.com/t5/Splunk-Search/Using-by-clause-overrides-limit/m-p/479513#M134389 <P>I have used the following <BR /> source="C:\Users\spali\Downloads\products\*" host="DESKTOP-K35HBNT"<BR /> | top product_name price by Code limit=5</P> <P>Code product_name price count percent<BR /> A Mediocre Kingdoms 24.99 1 100.000000<BR /> B Dream Crusher 39.99 1 100.000000<BR /> C Final Sequel 24.99 1 100.000000<BR /> D World of Cheese 24.99 1 100.000000<BR /> E World of Cheese Tee 9.99 1 100.000000<BR /> F Puppies vs. Zombies 4.99 1 100.000000<BR /> G Curling 2014 19.99 1 100.000000<BR /> H Manganiello Bros. 39.99 1 100.000000<BR /> I Manganiello Bros. Tee 9.99 1 100.000000<BR /> J Orvil the Wolverine 39.99 1 100.000000<BR /> K Benign Space Debris 24.99 1 100.000000<BR /> L SIM Cubicle 19.99 1 100.000000<BR /> M Holy Blade of Gouda 5.99 1 100.000000<BR /> N Fire Resistance Suit of Provolone 3.99 1 100.000000<BR /> O Grand Theft Scooter 24.99 1 100.000000<BR /> P SIM Cubicle Tee 9.99 1 100.000000</P> <P>I should have got only 5, Why is that I am getting more than that?</P> Mon, 06 Jan 2020 11:31:53 GMT https://community.splunk.com/t5/Splunk-Search/Using-by-clause-overrides-limit/m-p/479513#M134389 palisetty 2020-01-06T11:31:53Z Re: Using 'by' clause overrides 'limit'? https://community.splunk.com/t5/Splunk-Search/Using-by-clause-overrides-limit/m-p/479514#M134390 <P>Have you tried <CODE>top limit=5 product_name price by Code</CODE> or <CODE>top 5 product_name price by Code</CODE>?</P> Mon, 06 Jan 2020 12:11:15 GMT https://community.splunk.com/t5/Splunk-Search/Using-by-clause-overrides-limit/m-p/479514#M134390 richgalloway 2020-01-06T12:11:15Z Re: Using 'by' clause overrides 'limit'? https://community.splunk.com/t5/Splunk-Search/Using-by-clause-overrides-limit/m-p/479515#M134391 <P>Because Code has 16 values.<BR /> <CODE>limit</CODE> is limited by each <CODE>Code</CODE>.</P> Mon, 06 Jan 2020 12:14:36 GMT https://community.splunk.com/t5/Splunk-Search/Using-by-clause-overrides-limit/m-p/479515#M134391 to4kawa 2020-01-06T12:14:36Z