All Apps and Add-ons

How to increase search index destination ip addresses results based from default values of 10 to more

syedfahad
New Member

Dears

By default I am getting 10 values under destination ip addresses. Please find image as attached and let me know how can I get more IP addresses with hit count and Percentage usage.

alt text

Tags (1)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

You should add "| top limit=50 dest_ip" at the end of your query.

r. Ismo

View solution in original post

0 Karma

wmyersas
Builder

When you click the field in the events view, you only ever get the top 10 entries - it's a summary statistic 🙂

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

You should add "| top limit=50 dest_ip" at the end of your query.

r. Ismo

0 Karma

syedfahad
New Member

Thank you for the help.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...