https://community.splunk.com/t5/Deployment-Architecture/What-is-the-impact-if-we-increase-makeresults-stanza-in-limits/m-p/393830#M14305 <P>hi Team,</P> <P>We have a requirement where we get results of more than 50000 when we run serach for last 24 hours. We need to set an alert in ITSI based on the count of result. Since by default the makeresults is 50000 we doont see all the results and triggering false notable events in ITSI. how does it impact if we increase the makeresults from default 50000 to 1 or 2 Million. </P> <P>[searchresults]<BR /> maxresultrows = 50000</P> <P>Thanks,<BR /> Sree</P> Sat, 16 Jun 2018 10:29:24 GMT mallempatisreed 2018-06-16T10:29:24Z https://community.splunk.com/t5/Deployment-Architecture/What-is-the-impact-if-we-increase-makeresults-stanza-in-limits/m-p/393830#M14305 <P>hi Team,</P> <P>We have a requirement where we get results of more than 50000 when we run serach for last 24 hours. We need to set an alert in ITSI based on the count of result. Since by default the makeresults is 50000 we doont see all the results and triggering false notable events in ITSI. how does it impact if we increase the makeresults from default 50000 to 1 or 2 Million. </P> <P>[searchresults]<BR /> maxresultrows = 50000</P> <P>Thanks,<BR /> Sree</P> Sat, 16 Jun 2018 10:29:24 GMT https://community.splunk.com/t5/Deployment-Architecture/What-is-the-impact-if-we-increase-makeresults-stanza-in-limits/m-p/393830#M14305 mallempatisreed 2018-06-16T10:29:24Z https://community.splunk.com/t5/Deployment-Architecture/What-is-the-impact-if-we-increase-makeresults-stanza-in-limits/m-p/393831#M14306 <P>You may have OOM issues.. Not sure!</P> Sat, 16 Jun 2018 14:35:17 GMT https://community.splunk.com/t5/Deployment-Architecture/What-is-the-impact-if-we-increase-makeresults-stanza-in-limits/m-p/393831#M14306 amiftah 2018-06-16T14:35:17Z