How-To: Return More than 200 Matching Events in a Query

By default, LogScale returns only 200 matching results from a given query. You can increase the number of matching results returned by filtering through the tail() function.

For example:

logscale
127.0.0.1
| tail(10000)

This increases the maximum number of events returned, up to the specified value. The maximum supported number of events returned is 10000.

Another way of getting more event fields than the 200 events displayed by default is through the UI, using Fetch More.