Thank you for your detailed response @acharlieh! I am sad to hear that but understand and also assumed after all the reading I did that this was indeed not currently supported. I will follow your recommendation and open a feature request, hopefully it won't take too long ... View more

Let me add a line of thought I tried and failed to resolve - looking at the deployed Splunk host files, I saw that the number I am trying to modify is being displayed from a variable called scanCount Also, in the search_results_info file (info.csv) of the job I saw a field called scan_count that was set to 0 through out the entire search process (which strengthened my suspicions that this is related), I tried to edit the file mid run but encountered issues and it didn't affect the UI when I succeeded. I also attempted to update it in a more generic way (instead of a one time bypass) - through the code of the application: self.search_results_info["scan_count"] = 100000 But this results in an Exception of: 'ObjectView' object does not support item assignment. that means it's a readonly variable that can't be modified from the code I was wondering if there's a different way to update it by a non-direct access Thanks! ... View more

First of all, thanks for replying @livehybrid  I saw in the documentation that the default value of run_in_preview is true, I tried explicitly adding it to the commands.conf both as true and false (separate tests) - and it doesn't affect my experience.. Two questions regarding that, since I don't completely understand the preview mode: 1. What did you expect it to change? The 0 number to increase in correlation with the fetched results? Or would I have been able to somehow set the "total" count? 2. Could you please expand what is exactly the preview mode? I can't find any difference in the behavior when running with false setting Other than that - if you might have any other suggestions on how can I resolve the original issue I would highly appreciate some more thoughts and things to try Thanks! ... View more