Splunk Search

These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached

Contributor

Hi, I have results about 3333 rows. when am generating the query as sourcetype="Churn Data_CSV" | table Churn "total eve calls" "total night calls" which displays a scatter plot. it is not showing all the values. giving a warning message below it as These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached
In statistics tab, am able to get all 3333 rows but not in visualizations ( selected scatter chart ).
I am very new to this splunk. please help me out.

Thanks santhosh.

Communicator

Have you opened a support case for this? We are trying to get Splunk to remove this limit and more customers behind this will help drive this.

Thanks,
Ken

0 Karma

Ultra Champion

Be careful. Removing this limit could result in a crawling splunk instance because the end-users machine can't handle the rendering needed.

0 Karma

SplunkTrust
SplunkTrust

Hi SanthoshSreshta,

take a look at this answer http://answers.splunk.com/answers/73745/max-data-points-that-charts-can-handle.html

cheers, MuS

Contributor

Hi.
Just got some solution to it < option name="charting.data.count" >9999</ option > inserted this tag to my xml and recovered.
anyway thanks a lot for quick reply 🙂

0 Karma

Ultra Champion
0 Karma