Quantcast
Viewing all articles
Browse latest Browse all 13053

How to list more than 500 lines in an event on a dashboard

Hi I want to list all the lines for a particular column of my dashboard, But splunk is only allowing few lines to display on the dashboard and rest are hidden

My dashboard:

column1 column2 10:30 PM 1 2 3 4
[170 more values] 10:33 PM 1 2 3 [123 more values]

How can i configure my dashboard so that i can view all the lines of column2?

i tried the using the steps explained in this link " [http://answers.splunk.com/answers/26392/show-most-relevant-lines-exceeds-500-limit][1] " There is only 1 flashtimeline.xml in my views who's owner is search app but the permission is set to global. Should i be changing the param in the same search app's flashtimeline.xml or should i create a separate flashtimeline.xml for my app under it's view? Currently i did the following changes with no luck:

In Splunk/etc/apps/search/local/data/ui/views/flashtimeline.xml :=

<module name="EventsViewer" layoutpanel="resultsAreaLeft"> <param name="segmentation">full</param> <param name="reportFieldLink">report_builder_format_report</param> <param name="maxLines">0</param> <param name="maxLinesConstraint">1000</param>

I am adding these two highlighted lines but it is giving me no results :(

Am i missing something? Please advice

Thanks :)


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>