(splunk 4.2) I have a saved search that returns too many categories to be visually clear in a chart. I would like to use the search for an entire dashboard, so I don't want to restrict it. I would like to just display the top 20 results in a chart so the categories will be readable. Can I filter the saved search using the simplified xml?
On a dashboard with a form, you can use
You may be assuming I know more than I do. Currently I'm using