my splunk query results are getting truncated when creating a table Is there any workaround to avoid this ??
index=gbi_* (AppName=*) | table SQL
applied rex, after that it worked. Thanks
Main question is whether your data is getting truncated when you're displaying it (which is kinda unlikely) or has it been truncated on ingestion. Check your data with this:
index=gbi_* (AppName=*)
| eval strlen=len(_raw)
| stats max(strlen)
Does the answer to this similar question help?