topic Re: These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached in Splunk Search

These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached

SanthoshSreshta — Wed, 13 May 2015 05:01:18 GMT

Hi, I have results about 3333 rows. when am generating the query as sourcetype="Churn Data_CSV" | table Churn "total eve calls" "total night calls" which displays a scatter plot. it is not showing all the values. giving a warning message below it as These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached
In statistics tab, am able to get all 3333 rows but not in visualizations ( selected scatter chart ).
I am very new to this splunk. please help me out.

Thanks santhosh.

Re: These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached

MuS — Wed, 13 May 2015 05:06:38 GMT

Hi SanthoshSreshta,

take a look at this answer http://answers.splunk.com/answers/73745/max-data-points-that-charts-can-handle.html

cheers, MuS

Re: These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached

SanthoshSreshta — Wed, 13 May 2015 05:19:39 GMT

Hi.
Just got some solution to it < option name="charting.data.count" >9999</ option > inserted this tag to my xml and recovered.
anyway thanks a lot for quick reply 🙂

Re: These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached

sloshburch — Fri, 29 Jan 2016 14:41:58 GMT

Or set it to 0 if you're feeling dangerous.
http://docs.splunk.com/Documentation/Splunk/6.3.2/Viz/ChartConfigurationReference

Re: These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached

kbecker — Thu, 29 Sep 2016 15:13:25 GMT

Have you opened a support case for this? We are trying to get Splunk to remove this limit and more customers behind this will help drive this.

Thanks,
Ken

Re: These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached

sloshburch — Tue, 04 Oct 2016 12:49:45 GMT

Be careful. Removing this limit could result in a crawling splunk instance because the end-users machine can't handle the rendering needed.