All Apps and Add-ons

Sideview Utils: Can you adjust the size of the scrollback history for the Events module?

linuxchuck
Explorer

I've successfully created a custom search view using Sideview Utils that includes the use of the Events module. (I used the sv_search.xml example as a template.)

The "eternal scrolling" feature works fine with one exception: Only about 30 events are kept in the scrollback history. The rest of the buffer is now empty. I can even scroll up for pages (if I scrolled down far enough) of blank space.

I fully understand that the scrollback buffer is limited to preserve memory use, but only 30 events? These aren't even large events... they are single-line events of about 200 characters each.

Is it possible to give the Events module a larger scrollback history? Only having 30 lines of available history really limits the usefulness of this module.

Thanks!

0 Karma
Get Updates on the Splunk Community!

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...