Splunk Search

These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached

SanthoshSreshta
Contributor

Hi, I have results about 3333 rows. when am generating the query as sourcetype="Churn Data_CSV" | table Churn "total eve calls" "total night calls" which displays a scatter plot. it is not showing all the values. giving a warning message below it as These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached
In statistics tab, am able to get all 3333 rows but not in visualizations ( selected scatter chart ).
I am very new to this splunk. please help me out.

Thanks santhosh.

kbecker
Communicator

Have you opened a support case for this? We are trying to get Splunk to remove this limit and more customers behind this will help drive this.

Thanks,
Ken

0 Karma

sloshburch
Ultra Champion

Be careful. Removing this limit could result in a crawling splunk instance because the end-users machine can't handle the rendering needed.

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi SanthoshSreshta,

take a look at this answer http://answers.splunk.com/answers/73745/max-data-points-that-charts-can-handle.html

cheers, MuS

SanthoshSreshta
Contributor

Hi.
Just got some solution to it < option name="charting.data.count" >9999</ option > inserted this tag to my xml and recovered.
anyway thanks a lot for quick reply 🙂

0 Karma

sloshburch
Ultra Champion
0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...