Awesome! I had tried something similar before but couldn't figure out how to get the size of a whole row. Didn't think about going through each field separately. Quite resource intensive, though, as you mention in the code itself. Doesn't work well for me when using the REST endpoint |rest/services/data/lookup-table-files splunk_server=local This one works better for me: |rest /servicesNS/$env:user$/$env:app$/data/lookup-table-files splunk_server=local And all the $TOTAL_FIELD_VALUE$ cause problems in my dashboard as I use a form, replacing it with #TOTAL_FIELD_VALUE# works fine. Still, awesome! ... View more