Splunk Search

From a Hunk VIX, what is the max output on a table or stats command?

jaredlaney
Contributor

I'm creating a table/stats command with a large output and the statistics seems to be capping out at 10k. Is there a limit to statistics in Hunk? Is this something maybe in limits.conf that I can change specifically for Hunk?

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

Exactly, in limits.conf modify this stanza
[stats]
maxresultrows = 50000
maxvalues = 10000
maxvaluesize = 1000

jaredlaney
Contributor

We have enterprise Splunk coupled with Hunk. I'm guessing these two limits are tied together and there is no possibility of separating them?

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

You can always use head or limit in the search command itself. See this thread: http://answers.splunk.com/answers/50363/how-to-limit-my-search-to-return-only-the-top-10-results-bas...

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...