Splunk Search

How to display 86400 points on timechart?

brandy81
Path Finder

Hi, I need your helps. I am trying to display 86400 points with timechart. I did applied configuration below. The version is 7.2.6.

visualizations.conf
data_sources.primary.params.count = 0

web.conf
jschart_truncation_limit = 0
jschart_truncation_limit.chrome = 0
jschart_series_limit = 0
jschart_results_limit = 0

test.xml
0
0​

SPL : index=_internal earliest=-d@d latest=@d sourcetype=splunkd | timechart span=1s count

But, the chart display only 50000 points....(It displays only from 00:00AM to around 2:00PM.) Is it actual limitation? How to display 86400 points all together?

0 Karma