Splunk Search

Problem with the number of column in a row

abhayneilam
Contributor

Hi,

I am running a query which would produce 29 column all total, but in my SPLUNK result set it is showing only upto 10 columns and rest goes to OTHER column

If it is more than 10 column in a row it will take rest of the column as a OTHER

Please let me know how to fix this issue, how to increase the number of column to be displayed in the SPLUNK Result set

Thanks in Advance

Tags (2)
0 Karma
1 Solution

abhayneilam
Contributor

yaa martin you are right, I am sorry , I was exicted that's you forgot to post the answer !! we can use limit= to limit the number of column to be displayed in the result set of SPLUNK.

Ex: If I have total of 50 columns in a result set , by default only 10 will be displayed and rest will go in OTHER field, so at that time we can give the following ..

....| chart count(Any_Field) by ID limit=50

Thanks 🙂

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

You could write what you did as an answer so future generations 😉 can use it.

0 Karma

abhayneilam
Contributor

It is done on my own , thanks !!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...