Splunk Search

How to visualize more than 100 rows in a table in the dashboard?

Engager

Hi,
I'm using the following option for a table in a dashboard:

<option name="count">xx</option>

and it successfully changes the number of displayed rows from 10 to xx, but only up to 100. If I try to specify a value for count that is bigger than 100, it defaults back to 10, not accepting the new count. (100 seems to be the hardcoded limit for the number of rows that can be visualized in a table)
Is there a way to remove this limitation and visualize more than 100 rows?

Tags (5)

Path Finder

you can split the table by using streamstats:

row 1:

| your search
| streamstats count as numOfEvents
| where numOfEvents<101

    <option name="count">100</option>

row 2:
For the next 100 rows
| your search
| streamstats count as numOfEvents

| where numOfEvents<201

    <option name="count">100</option>

etc.

0 Karma

Explorer

Is there any way to view more than 100 rows in table, please let me know.

0 Karma

Contributor

try:

 <option name="count">0</option>
0 Karma

Explorer

is possible in HTML?

0 Karma

Path Finder

¿Hi did you find out a solution?

Engager

I have tried 0 (even -1), but still no luck 😕 It defaults to 10

0 Karma

Communicator

Hi @jojocalman are you able to solve this issue? 🙂

0 Karma