Increase the number of values shown for selected fields

[theouhuios]

Is there a way to increase the number of values shown for selected fields from 10 to 20-25? A customer has put in a request today for this and I have no clue on if this is possible.

[martin_mueller]

There's no intended configuration for this... however you could touch some JavaScript inappropriately to get this:

However, changes down there likely aren't supported, certainly won't survive an update, and may have unforeseen side effects... so I'm not quite sure if you want to go down that route.

[martin_mueller]

The fetchSummary in share/splunk/search_mrsparkle/exposed/js/controllers/BaseSearch.js calls this REST endpoint http://docs.splunk.com/Documentation/Splunk/latest/RESTAPI/RESTsearch#search.2Fjobs.2F.7Bsearch_id.7... which by default returns top 10 values per field. By adding top_count: 20 to the data passed to the REST endpoint you can make it return more values. After that change you'll have to rebuild the search page in share/splunk/search_mrsparkle/exposed/js/profiles.

Note, the 10 is also hard-coded into some views, as you can see from my screenshot: "Top 10 Values".

[theouhuios]

Hello martin, Can you please let me know which js has to be tweaked. I will not be using this on a regular purpose. But would still like to know incase I need it once in a while.