{"id":26131,"date":"2020-12-03T15:57:34","date_gmt":"2020-12-03T15:57:34","guid":{"rendered":"https:\/\/merikebi.warrenmyers.com\/?p=26131"},"modified":"2020-12-03T15:57:34","modified_gmt":"2020-12-03T15:57:34","slug":"answer-by-warren-for-configuring-splunk-for-usability","status":"publish","type":"post","link":"https:\/\/merikebi.warrenmyers.com\/?p=26131","title":{"rendered":"Answer by warren for configuring Splunk for usability"},"content":{"rendered":"<blockquote>\n<p>how can I remove line breaks and get a horizontal scroll bar instead?<\/p>\n<\/blockquote>\n<p>No idea what you&#8217;re asking here.<\/p>\n<blockquote>\n<p>how can I increase the pagination size to something reasonable like 1k or 10k?<\/p>\n<\/blockquote>\n<p>What makes you think &quot;1k or 100k&quot; is &quot;reasonable&quot;? Splunk caps the number of displayed results per page at 100. There is no &quot;workaround&quot; beyond downloading the results into a CSV (or similar), and playing with it outside Splunk.<\/p>\n<p>But why would you <em>do<\/em> that on anything that resembles a routine basis? Splunk is exceptionally powerful and data manipulation and visualization.<\/p>\n<blockquote>\n<p>how can I disable the alternating row colors?<\/p>\n<\/blockquote>\n<p>What row colors? The ones that come up in the search window when you use <a href=\"https:\/\/docs.splunk.com\/Documentation\/Splunk\/latest\/SearchReference\/table\" rel=\"nofollow noreferrer\"><code>| table<\/code><\/a> or <a href=\"https:\/\/docs.splunk.com\/Documentation\/Splunk\/latest\/SearchReference\/stats\" rel=\"nofollow noreferrer\"><code>| stats<\/code><\/a>? You don&#8217;t. Not unless you push the query to a <a href=\"https:\/\/docs.splunk.com\/Documentation\/Splunk\/latest\/Viz\/WorkingWithDashboardPanels\" rel=\"nofollow noreferrer\">Dashboard Panel<\/a>, and play with the CSS for that dashboard.<\/p>\n<blockquote>\n<p>is there something like &quot;tail -f&quot;?<\/p>\n<\/blockquote>\n<p>The closest option to something like this is a <a href=\"https:\/\/docs.splunk.com\/Documentation\/Splunk\/latest\/Search\/Specifyrealtimewindowsinyoursearch\" rel=\"nofollow noreferrer\">realtime search<\/a>. However, use real-time searching with extreme caution, as it&#8217;s <em>very<\/em> taxing on the environment<\/p>\n<p>from User warren &#8211; Stack Overflow https:\/\/stackoverflow.com\/questions\/65112730\/configuring-splunk-for-usability\/65129325#65129325<br \/>\nvia <a href=\"https:\/\/ifttt.com\/?ref=da&#038;site=wordpress\">IFTTT<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>how can I remove line breaks and get a horizontal scroll bar instead? No idea what you&#8217;re asking here. how can I increase the pagination size to something reasonable like 1k or 10k? What makes you think &quot;1k or 100k&quot; is &quot;reasonable&quot;? Splunk caps the number of displayed results per page at 100. There is &hellip;<br \/><a href=\"https:\/\/merikebi.warrenmyers.com\/?p=26131\" class=\"more-link pen_button pen_element_default pen_icon_arrow_double\">Continue reading <span class=\"screen-reader-text\">Answer by warren for configuring Splunk for usability<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4],"tags":[991],"keyring_services":[],"class_list":["post-26131","post","type-post","status-publish","format-standard","hentry","category-blih","tag-stackexchange"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/26131","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=26131"}],"version-history":[{"count":1,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/26131\/revisions"}],"predecessor-version":[{"id":26132,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/26131\/revisions\/26132"}],"wp:attachment":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=26131"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=26131"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=26131"},{"taxonomy":"keyring_services","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fkeyring_services&post=26131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}