Splunk Search

From a Hunk VIX, what is the max output on a table or stats command?

jaredlaney
Contributor

I'm creating a table/stats command with a large output and the statistics seems to be capping out at 10k. Is there a limit to statistics in Hunk? Is this something maybe in limits.conf that I can change specifically for Hunk?

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

Exactly, in limits.conf modify this stanza
[stats]
maxresultrows = 50000
maxvalues = 10000
maxvaluesize = 1000

jaredlaney
Contributor

We have enterprise Splunk coupled with Hunk. I'm guessing these two limits are tied together and there is no possibility of separating them?

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

You can always use head or limit in the search command itself. See this thread: http://answers.splunk.com/answers/50363/how-to-limit-my-search-to-return-only-the-top-10-results-bas...

0 Karma
Get Updates on the Splunk Community!

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...