Hi All,
I am creating a dashboard which has 30 trend lines. However, when I create the visualization chart, only 11 trend lines are coming.
Is there any configuration file which can be edited so that all the trend lines can be displayed?
You can add options to chart/timechart to change the displayed lines. EG if you are using timechart then
| timechart useother=f limit=30
That will remove the OTHER category and show 30 aggregates.
Have a look in the documentation specific to the command you are using for example:
http://docs.splunk.com/Documentation/Splunk/6.3.3/SearchReference/Timechart