All Apps and Add-ons

How to increase search index destination ip addresses results based from default values of 10 to more

syedfahad
New Member

Dears

By default I am getting 10 values under destination ip addresses. Please find image as attached and let me know how can I get more IP addresses with hit count and Percentage usage.

alt text

Tags (1)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

You should add "| top limit=50 dest_ip" at the end of your query.

r. Ismo

View solution in original post

0 Karma

wmyersas
Builder

When you click the field in the events view, you only ever get the top 10 entries - it's a summary statistic 🙂

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

You should add "| top limit=50 dest_ip" at the end of your query.

r. Ismo

0 Karma

syedfahad
New Member

Thank you for the help.

0 Karma
Get Updates on the Splunk Community!

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...