Reporting

What does the "LIMIT" operator in Pivot do?

Champion

The documentation for Pivot has included a "LIMIT" operator for quite some time, yet there is no explanation of what it does or how to use it. I have not yet seen any examples that use it either. Can someone shed some light on this?

Here is the snippet of documentation from the Pivot Knowledgebase page. This is all. There is nothing else mentioned.

Descriptions for limit elements
   Limit <limit expression>
       Syntax: LIMIT <fieldname> BY <limittype> <number> <stats-function>(<fieldname>)
       Description:
Tags (1)
0 Karma
1 Solution

Splunk Employee
Splunk Employee

Hello rjthibod

Thank you for pointing out this missing information. I've updated the documentation as well. Hope this helps!

Limit limit expression
Syntax: LIMIT fieldname BY limittype number stats-function(fieldname)

Description: Use to limit the number of elements in the pivot. The limittype argument specifies where to place the limit. The valid values are top or bottom. The number argument must be a positive integer. You can use any stats function, such as min, max, avg, and sum.

Example: LIMIT foo BY TOP 10 avg(bar)

View solution in original post

Splunk Employee
Splunk Employee

Hello rjthibod

Thank you for pointing out this missing information. I've updated the documentation as well. Hope this helps!

Limit limit expression
Syntax: LIMIT fieldname BY limittype number stats-function(fieldname)

Description: Use to limit the number of elements in the pivot. The limittype argument specifies where to place the limit. The valid values are top or bottom. The number argument must be a positive integer. You can use any stats function, such as min, max, avg, and sum.

Example: LIMIT foo BY TOP 10 avg(bar)

View solution in original post

Champion

Thank you very much.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!