All Apps and Add-ons

How to increase search index destination ip addresses results based from default values of 10 to more

syedfahad
New Member

Dears

By default I am getting 10 values under destination ip addresses. Please find image as attached and let me know how can I get more IP addresses with hit count and Percentage usage.

alt text

Tags (1)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

You should add "| top limit=50 dest_ip" at the end of your query.

r. Ismo

View solution in original post

0 Karma

wmyersas
Builder

When you click the field in the events view, you only ever get the top 10 entries - it's a summary statistic 🙂

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

You should add "| top limit=50 dest_ip" at the end of your query.

r. Ismo

0 Karma

syedfahad
New Member

Thank you for the help.

0 Karma
Get Updates on the Splunk Community!

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...