topic Re: No input limit for python custom command in Splunk Dev

No input limit for python custom command

santosm — Tue, 30 Oct 2018 11:59:58 GMT

I'm try doing a custom transforming command, using Intersplunk, but I have a limited of 50000 events for iteration.

I know I could change in limits.conf in searchresults the parameter maxresultrows, but I want change this parameter only for my command

Re: No input limit for python custom command

tcole_splunk — Fri, 11 Dec 2020 21:23:04 GMT

Hi!

You should be able to limit search results for your specific command by creating a separate stanza for your command in limits.conf. Then, you can use the maxresultrows parameter to limit search results to 50,000.

For example:

[your_custom_search_command]

maxresultrows = 50,000

For more information about using limits.conf to apply limits to specific search commands, see https://docs.splunk.com/Documentation/Splunk/latest/Admin/Limitsconf.

Hope this helps!

Re: No input limit for python custom command

tcole_splunk — Fri, 11 Dec 2020 21:56:13 GMT

Alternatively, if you want to avoid limts.conf all together, you can use the maxinputs setting in commands.conf.

For example:

[your_custom_search_command]

maxinputs = 50,000

For more information about this method, see https://docs.splunk.com/Documentation/Splunk/latest/Admin/Commandsconf.