Splunk Search

From a Hunk VIX, what is the max output on a table or stats command?

jaredlaney
Contributor

I'm creating a table/stats command with a large output and the statistics seems to be capping out at 10k. Is there a limit to statistics in Hunk? Is this something maybe in limits.conf that I can change specifically for Hunk?

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

Exactly, in limits.conf modify this stanza
[stats]
maxresultrows = 50000
maxvalues = 10000
maxvaluesize = 1000

jaredlaney
Contributor

We have enterprise Splunk coupled with Hunk. I'm guessing these two limits are tied together and there is no possibility of separating them?

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

You can always use head or limit in the search command itself. See this thread: http://answers.splunk.com/answers/50363/how-to-limit-my-search-to-return-only-the-top-10-results-bas...

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...