Running SearchManager in a dashboard, I get 165 results, but why does SplunkResultsModel only return the first 100 events?

[P_A_WORKS]

Hi,

After I run a SearchManager in dashboard, the number of result events I see is 165, however, when I use the following code to retrieve the results data:

var myResults = initSearch.data("results");
var searchResultArray = myResults.data().rows;

searchResultArray only has the first 100 events. Why is that ? Anyone run into this problem? How to get all events back?

thanks

[Yasaswy · Accepted solution]

Hi, you will need to pass count: 0 in your search parameters to get all results... refer here
Eg... for a One Shot search

var searchParams = {
earliest_time: "2011-06-19T12:00:00.000-07:00",
latest_time: "2012-12-02T12:00:00.000-07:00",
count : 0 <-- Add this
};

[P_A_WORKS]

hey, I finally find documentation about how to set this parameter "count" in my case... a place so easy to ignore, and set "count" to 0 does solve the problem, thanks for your help 🙂

[Yasaswy]

Good to hear on a Friday morning 🙂 .... have a nice weekend.

[P_A_WORKS]

haha...you too 🙂

[P_A_WORKS]

thanks for your replay 🙂

but in my case, I'm not using the javascript SDK, I'm using this :

http://docs.splunk.com/Documentation/WebFramework

and I don't find a property of "count" or similar ones in the SearchManager document page...

[Yasaswy]

hi,
you should be able to try something like:
var myResults = mainSearch.data("events", { count: n});

check out the method data( results_type, { attributes } ) ... here