Reporting

What does the "LIMIT" operator in Pivot do?

rjthibod
Champion

The documentation for Pivot has included a "LIMIT" operator for quite some time, yet there is no explanation of what it does or how to use it. I have not yet seen any examples that use it either. Can someone shed some light on this?

Here is the snippet of documentation from the Pivot Knowledgebase page. This is all. There is nothing else mentioned.

Descriptions for limit elements
   Limit <limit expression>
       Syntax: LIMIT <fieldname> BY <limittype> <number> <stats-function>(<fieldname>)
       Description:
Tags (1)
0 Karma
1 Solution

lstewart_splunk
Splunk Employee
Splunk Employee

Hello rjthibod

Thank you for pointing out this missing information. I've updated the documentation as well. Hope this helps!

Limit limit expression
Syntax: LIMIT fieldname BY limittype number stats-function(fieldname)

Description: Use to limit the number of elements in the pivot. The limittype argument specifies where to place the limit. The valid values are top or bottom. The number argument must be a positive integer. You can use any stats function, such as min, max, avg, and sum.

Example: LIMIT foo BY TOP 10 avg(bar)

View solution in original post

lstewart_splunk
Splunk Employee
Splunk Employee

Hello rjthibod

Thank you for pointing out this missing information. I've updated the documentation as well. Hope this helps!

Limit limit expression
Syntax: LIMIT fieldname BY limittype number stats-function(fieldname)

Description: Use to limit the number of elements in the pivot. The limittype argument specifies where to place the limit. The valid values are top or bottom. The number argument must be a positive integer. You can use any stats function, such as min, max, avg, and sum.

Example: LIMIT foo BY TOP 10 avg(bar)

rjthibod
Champion

Thank you very much.

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...