Splunk Search

From a Hunk VIX, what is the max output on a table or stats command?

jaredlaney
Contributor

I'm creating a table/stats command with a large output and the statistics seems to be capping out at 10k. Is there a limit to statistics in Hunk? Is this something maybe in limits.conf that I can change specifically for Hunk?

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

Exactly, in limits.conf modify this stanza
[stats]
maxresultrows = 50000
maxvalues = 10000
maxvaluesize = 1000

jaredlaney
Contributor

We have enterprise Splunk coupled with Hunk. I'm guessing these two limits are tied together and there is no possibility of separating them?

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

You can always use head or limit in the search command itself. See this thread: http://answers.splunk.com/answers/50363/how-to-limit-my-search-to-return-only-the-top-10-results-bas...

0 Karma
Get Updates on the Splunk Community!

Combine Multiline Logs into a Single Event with SOCK - a Guide for Advanced Users

This article is the continuation of the “Combine multiline logs into a single event with SOCK - a step-by-step ...

Everything Community at .conf24!

You may have seen mention of the .conf Community Zone 'round these parts and found yourself wondering what ...

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...