Splunk Search

How to visualize more than 100 rows in a table in the dashboard?

jojocalman
Engager

Hi,
I'm using the following option for a table in a dashboard:

<option name="count">xx</option>

and it successfully changes the number of displayed rows from 10 to xx, but only up to 100. If I try to specify a value for count that is bigger than 100, it defaults back to 10, not accepting the new count. (100 seems to be the hardcoded limit for the number of rows that can be visualized in a table)
Is there a way to remove this limitation and visualize more than 100 rows?

Tags (5)

rrovers
Communicator

you can split the table by using streamstats:

row 1:

| your search
| streamstats count as numOfEvents
| where numOfEvents<101

    <option name="count">100</option>

row 2:
For the next 100 rows
| your search
| streamstats count as numOfEvents

| where numOfEvents<201

    <option name="count">100</option>

etc.

0 Karma

amoldesai
Explorer

Is there any way to view more than 100 rows in table, please let me know.

0 Karma

pramit46
Contributor

try:

 <option name="count">0</option>
0 Karma

cgaete
Explorer

is possible in HTML?

0 Karma

marcolesh
Path Finder

¿Hi did you find out a solution?

jojocalman
Engager

I have tried 0 (even -1), but still no luck 😕 It defaults to 10

0 Karma

mjlsnombrado
Communicator

Hi @jojocalman are you able to solve this issue? 🙂

0 Karma