Splunk Search
Highlighted

How to override the 20 line limit for the table view of embedded reports?

Communicator

Hi,

It looks like a table view of an embedded report is limited to the first 20 results.
I couldn't find any place where to change this limit. Changing the view before embedding didn't help either...

Can you point me in the right direction?

Thanks,
Steph

Highlighted

Re: How to override the 20 line limit for the table view of embedded reports?

Communicator

I've found in etc/system/default/ui-prefs.conf the following:

display.prefs.events.count = 20
display.prefs.statistics.count = 20

but changing it (in etc/system/local/ui-prefs.conf) didn't help...
any other idea? can we override it somewhere?

0 Karma
Highlighted

Re: How to override the 20 line limit for the table view of embedded reports?

Path Finder

I got the same problem, could anyone have solved it?
Thank you

0 Karma
Highlighted

Re: How to override the 20 line limit for the table view of embedded reports?

Path Finder

I got the same problem, it will be great if any one share the idea to resolve this issue.

0 Karma
Highlighted

Re: How to override the 20 line limit for the table view of embedded reports?

New Member

I still hit this issue in splunk 6.6.1. Is this bug fixed in any new version or any plan to fix this?

0 Karma
Highlighted

Re: How to override the 20 line limit for the table view of embedded reports?

2020, still facing the same issue. Any help would be appreciated.,2020, Still same issue, unless someone has solved it.

0 Karma
Highlighted

Re: How to override the 20 line limit for the table view of embedded reports?

Builder

I've found a workaround to this issue. The limit is 20 table rows, but there seems to be no limit in the number of multivalue fields in a single row. So, instead of say running | stats count by user | fields user, you can use | stats values(user) as users by index | fields users. It's not pretty, but it works.

0 Karma