Problem with the number of column in a row

[abhayneilam]

Hi,

I am running a query which would produce 29 column all total, but in my SPLUNK result set it is showing only upto 10 columns and rest goes to OTHER column

If it is more than 10 column in a row it will take rest of the column as a OTHER

Please let me know how to fix this issue, how to increase the number of column to be displayed in the SPLUNK Result set

Thanks in Advance

[abhayneilam]

yaa martin you are right, I am sorry , I was exicted that's you forgot to post the answer !! we can use limit= to limit the number of column to be displayed in the result set of SPLUNK.

Ex: If I have total of 50 columns in a result set , by default only 10 will be displayed and rest will go in OTHER field, so at that time we can give the following ..

....| chart count(Any_Field) by ID limit=50

Thanks 🙂

[giorgio_adami_m · Accepted solution]

http://splunk-base.splunk.com/answers/2559/what-is-the-other-field

[martin_mueller]

You could write what you did as an answer so future generations 😉 can use it.

[abhayneilam]

It is done on my own , thanks !!