topic Re: How to show more than 50 events on a page in 7.x ? in Splunk Search

How to show more than 50 events on a page in 7.x ?

zebu14 — Wed, 14 Nov 2018 07:49:19 GMT

Hello,
In Splunk previous versions (5.x) there was an editable file to be able to add more choices for the number of displayed events (10/20/50 per page)

I want to display more events on each page (100 / 200) because my logs are quite verbose.

The question has already been asked for Splunk 6.x, but I am searching for a solution on version 7.1.

Any idea ?

Thank you

Re: How to show more than 50 events on a page in 7.x ?

inventsekar — Wed, 14 Nov 2018 08:23:16 GMT

Hi, this you want on the splunk search page or on the dashboard?

Re: How to show more than 50 events on a page in 7.x ?

zebu14 — Tue, 29 Sep 2020 21:59:01 GMT

On the splunk search page, yes.

I tried to edit the following files :
./share/splunk/search_mrsparkle/exposed/js/views/search/results/eventspane/controls/Master.js
./share/splunk/search_mrsparkle/exposed/js/views/search/searchhistory/historycontent/Master.js
./share/splunk/search_mrsparkle/exposed/js/views/dataset/tablecontainer/results/DatasetControls.js

With no success for the moment.

Re: How to show more than 50 events on a page in 7.x ?

inventsekar — Wed, 14 Nov 2018 12:23:22 GMT

maybe, check this page -
https://answers.splunk.com/answers/27359/how-to-expand-results-per-page-dropdown-with-answer.html

Re: How to show more than 50 events on a page in 7.x ?

aguthrie1190 — Wed, 30 Sep 2020 01:35:32 GMT

I'm not sure how supported this change is. But you can change the values in these two files:
/opt/splunk/share/splunk/search_mrsparkle/exposed/build/pages/enterprise/search.js
/opt/splunk/share/splunk/search_mrsparkle/exposed/build/pages/enterprise/common.js

Look for this JSON block:
{value:"10",label:("10 per page").t()},{value:"20",label:("20 per page").t()},{value:"50",label:_("50 per page").t()}

And add additional values to it:
{value:"10",label:("10 per page").t()},{value:"20",label:("20 per page").t()},{value:"50",label:("50 per page").t()},{value:"100",label:("100 per page").t()}

This code appears multiple times in each file, so you'll have to replace it each time.