Splunk Search

From a Hunk VIX, what is the max output on a table or stats command?

jaredlaney
Contributor

I'm creating a table/stats command with a large output and the statistics seems to be capping out at 10k. Is there a limit to statistics in Hunk? Is this something maybe in limits.conf that I can change specifically for Hunk?

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

Exactly, in limits.conf modify this stanza
[stats]
maxresultrows = 50000
maxvalues = 10000
maxvaluesize = 1000

jaredlaney
Contributor

We have enterprise Splunk coupled with Hunk. I'm guessing these two limits are tied together and there is no possibility of separating them?

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

You can always use head or limit in the search command itself. See this thread: http://answers.splunk.com/answers/50363/how-to-limit-my-search-to-return-only-the-top-10-results-bas...

0 Karma
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...