How-To: Return More than 200 Matching Events in a Query

Note

⌛ Article is more than two years old.

By default, LogScale returns only 200 matching results from a given query. You can increase the number of matching results returned by filtering through the tail() function.

For example:

logscale
127.0.0.1
| tail(10000)

This increases the maximum number of events returned, up to the specified value. The maximum supported number of events returned is 10000.

Another way of getting more event fields than the 200 events displayed by default is through the web interface, using the Sample more button. See Sample more for more information.