All Apps and Add-ons

How to increase search index destination ip addresses results based from default values of 10 to more

syedfahad
New Member

Dears

By default I am getting 10 values under destination ip addresses. Please find image as attached and let me know how can I get more IP addresses with hit count and Percentage usage.

alt text

Tags (1)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

You should add "| top limit=50 dest_ip" at the end of your query.

r. Ismo

View solution in original post

0 Karma

wmyersas
Builder

When you click the field in the events view, you only ever get the top 10 entries - it's a summary statistic 🙂

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

You should add "| top limit=50 dest_ip" at the end of your query.

r. Ismo

0 Karma

syedfahad
New Member

Thank you for the help.

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...