Hi Splunkers,
I have search like this:
index="myindex" host="myhost" | timechart span=1month latest(all_cnt) as "Number of all" by code useother=true limit=100
as a result there is all 100 values listed in timechart and legend. If I change query to:
index="myindex" host="myhost" | timechart span=1month latest(all_cnt) as "Number of all" by code useother=true limit=10
only top 10 values are represented in timechart and no "other" values are present in timechart but there is label in the legend.
Why? And how to solve this issue?
Thank you!
Dragana
... View more