Splunk Search

How to override the 20 line limit for the table view of embedded reports?

Communicator

Hi,

It looks like a table view of an embedded report is limited to the first 20 results.
I couldn't find any place where to change this limit. Changing the view before embedding didn't help either...

Can you point me in the right direction?

Thanks,
Steph

Builder

I've found a workaround to this issue. The limit is 20 table rows, but there seems to be no limit in the number of multivalue fields in a single row. So, instead of say running | stats count by user | fields user, you can use | stats values(user) as users by index | fields users. It's not pretty, but it works.

0 Karma

2020, still facing the same issue. Any help would be appreciated.,2020, Still same issue, unless someone has solved it.

0 Karma

New Member

I still hit this issue in splunk 6.6.1. Is this bug fixed in any new version or any plan to fix this?

0 Karma

Communicator

I've found in etc/system/default/ui-prefs.conf the following:

display.prefs.events.count = 20
display.prefs.statistics.count = 20

but changing it (in etc/system/local/ui-prefs.conf) didn't help...
any other idea? can we override it somewhere?

0 Karma

Path Finder

I got the same problem, it will be great if any one share the idea to resolve this issue.

0 Karma

Path Finder

I got the same problem, could anyone have solved it?
Thank you

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!