https://community.splunk.com/t5/Splunk-Search/How-to-see-all-values-in-a-field/m-p/234930#M69788 <P>This comes from the <CODE>top</CODE> command so just add this to your existing search:</P> <PRE><CODE>... | top &lt;Some Number Here&gt; SourceName </CODE></PRE> <P>A <CODE>0</CODE> should mean <CODE>unlimited</CODE>.</P> Wed, 29 Jun 2016 19:45:16 GMT woodcock 2016-06-29T19:45:16Z https://community.splunk.com/t5/Splunk-Search/How-to-see-all-values-in-a-field/m-p/234929#M69787 <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/1522i8FAC654849C637C2/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>It says 41 values exist, but it's only showing 10. How do I see the rest, and select from them with checkboxes? This is very useful since as soon as I choose one, then only one will show when I want multiple.</P> Wed, 29 Jun 2016 18:57:46 GMT https://community.splunk.com/t5/Splunk-Search/How-to-see-all-values-in-a-field/m-p/234929#M69787 tmontney 2016-06-29T18:57:46Z https://community.splunk.com/t5/Splunk-Search/How-to-see-all-values-in-a-field/m-p/234930#M69788 <P>This comes from the <CODE>top</CODE> command so just add this to your existing search:</P> <PRE><CODE>... | top &lt;Some Number Here&gt; SourceName </CODE></PRE> <P>A <CODE>0</CODE> should mean <CODE>unlimited</CODE>.</P> Wed, 29 Jun 2016 19:45:16 GMT https://community.splunk.com/t5/Splunk-Search/How-to-see-all-values-in-a-field/m-p/234930#M69788 woodcock 2016-06-29T19:45:16Z https://community.splunk.com/t5/Splunk-Search/How-to-see-all-values-in-a-field/m-p/234931#M69789 <P>When I did <CODE>top 0</CODE> I got zero results. I had 469 results in all, so <CODE>top 469</CODE> got me what I needed. Still, this steered me in the right direction...thanks!</P> Thu, 09 Nov 2017 18:24:36 GMT https://community.splunk.com/t5/Splunk-Search/How-to-see-all-values-in-a-field/m-p/234931#M69789 kendricbeachey 2017-11-09T18:24:36Z