Splunk Search

How to visualize more than 100 rows in a table in the dashboard?

jojocalman
Engager

Hi,
I'm using the following option for a table in a dashboard:

<option name="count">xx</option>

and it successfully changes the number of displayed rows from 10 to xx, but only up to 100. If I try to specify a value for count that is bigger than 100, it defaults back to 10, not accepting the new count. (100 seems to be the hardcoded limit for the number of rows that can be visualized in a table)
Is there a way to remove this limitation and visualize more than 100 rows?

Tags (5)

rrovers
Contributor

you can split the table by using streamstats:

row 1:

| your search
| streamstats count as numOfEvents
| where numOfEvents<101

    <option name="count">100</option>

row 2:
For the next 100 rows
| your search
| streamstats count as numOfEvents

| where numOfEvents<201

    <option name="count">100</option>

etc.

0 Karma

amoldesai
Explorer

Is there any way to view more than 100 rows in table, please let me know.

0 Karma

pramit46
Contributor

try:

 <option name="count">0</option>
0 Karma

cgaete
Explorer

is possible in HTML?

0 Karma

marcolesh
Path Finder

¿Hi did you find out a solution?

jojocalman
Engager

I have tried 0 (even -1), but still no luck 😕 It defaults to 10

0 Karma

mjlsnombrado
Communicator

Hi @jojocalman are you able to solve this issue? 🙂

0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...