Any reason is to why filters "computer" only shows 50 entries?

%3CLINGO-SUB%20id%3D%22lingo-sub-633774%22%20slang%3D%22en-US%22%3EAny%20reason%20is%20to%20why%20filters%20%22computer%22%20only%20shows%2050%20entries%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-633774%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20doing%20a%20log%20query%20to%20to%20figure%20out%20which%20computers%20have%20usagetrailing..%20but%20it%20only%20grabs%20the%20top%2050%20devices.%20as%20shown%20here%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20956px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F115674i667DD5E85B1E9B77%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22logquestion.png%22%20title%3D%22logquestion.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20settings%20or%20configurations%20I%20have%20to%20specify%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-633774%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAppReliability%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20Log%20Analytics%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EQuery%20Language%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-633837%22%20slang%3D%22en-US%22%3ERe%3A%20Any%20reason%20is%20to%20why%20filters%20%22computer%22%20only%20shows%2050%20entries%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-633837%22%20slang%3D%22en-US%22%3EIt%20just%20shows%2050%20when%20you%20press%20the%20filter%20button%20(I%20suspect%20to%20keep%20the%20interface%20tidy)%3B%20the%20query%20will%20actually%20run%20across%20all%20computers%20.%20%3CBR%20%2F%3E%3CBR%20%2F%3ETo%20see%2C%20replace%20your%20last%20line%20with%20this%3A%3CBR%20%2F%3E%3CBR%20%2F%3E%7C%20summarize%20dcount(Computer)%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-633963%22%20slang%3D%22en-US%22%3ERe%3A%20Any%20reason%20is%20to%20why%20filters%20%22computer%22%20only%20shows%2050%20entries%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-633963%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20show%20only%20up%20to%2050%20values%20in%20the%20facets%20to%20reduce%20the%20metadata%20fetch%20time%20and%20to%20save%20system%20resources.%20You%20can%20see%20all%20values%20by%20using%20query%20like%3A%20DHAppReliability%20%7C%20distinct%20Computer%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBTW%3A%20We%20are%20working%20these%20days%20on%20replacing%20the%20existing%20facets%20experience%20but%20it%20would%20take%20time%20till%20it%20will%20be%20done.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%2C%3C%2FP%3E%0A%3CP%3EMeir%20%3A%26gt%3B%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hi All,

 

I'm doing a log query to to figure out which computers have usagetrailing.. but it only grabs the top 50 devices. as shown here:

logquestion.png

 

Any settings or configurations I have to specify?

2 Replies
It just shows 50 when you press the filter button (I suspect to keep the interface tidy); the query will actually run across all computers .

To see, replace your last line with this:

| summarize dcount(Computer)

Hi,

 

We show only up to 50 values in the facets to reduce the metadata fetch time and to save system resources. You can see all values by using query like: DHAppReliability | distinct Computer

 

BTW: We are working these days on replacing the existing facets experience but it would take time till it will be done.

 

Thanks,

Meir :>