Hi,
I am running a query which would produce 29 column all total, but in my SPLUNK result set it is showing only upto 10 columns and rest goes to OTHER column
If it is more than 10 column in a row it will take rest of the column as a OTHER
Please let me know how to fix this issue, how to increase the number of column to be displayed in the SPLUNK Result set
Thanks in Advance
yaa martin you are right, I am sorry , I was exicted that's you forgot to post the answer !! we can use limit=
Ex: If I have total of 50 columns in a result set , by default only 10 will be displayed and rest will go in OTHER field, so at that time we can give the following ..
....| chart count(Any_Field) by ID limit=50
Thanks 🙂
You could write what you did as an answer so future generations 😉 can use it.
It is done on my own , thanks !!