Hi
We are running this search [**host=uswebserver12 |timechart span=5m avg(PercentProcessorTime) as CPU_Usage**] and getting the required events. But once we go to visualization we are not getting the full chart but only for few days with this error message "**These results may be truncated. This visualization is configured to display a maximum of 1000 results per series, and that limit has been reached**" . We just went through googling about this and found that we need to change charting.data.count values in simple XML. But we could not find anywhere where is this simple XML file is located so that we can edit it. Is it located inside any folders of splunk server or we need to edit it in the spluk web console itself. Kindly advice us
↧