<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Line limit for scripted inputs? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Line-limit-for-scripted-inputs/m-p/56830#M11071</link>
    <description>&lt;P&gt;Do you possibly have a custom LINE_BREAKER, and/or SHOULD_LINEMERGE = false set? If so, your script output may be treated as a single "line" in which case it would be truncated after 50,000 characters. You can raise this by setting &lt;CODE&gt;TRUNCATE = 999999&lt;/CODE&gt;, for example.&lt;/P&gt;

&lt;P&gt;Also, if you are running on a LWF, you should make sure that your output buffer doesn't cut off the middle of an event. It's not &lt;EM&gt;that&lt;/EM&gt; likely to happen unless the output is generated slowly enough that the LWF switches in the middle of your event, but it could happen occasionally. I don't think this is your problem if it's consistent.&lt;/P&gt;</description>
    <pubDate>Fri, 24 Sep 2010 12:30:59 GMT</pubDate>
    <dc:creator>gkanapathy</dc:creator>
    <dc:date>2010-09-24T12:30:59Z</dc:date>
    <item>
      <title>Line limit for scripted inputs?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Line-limit-for-scripted-inputs/m-p/56829#M11070</link>
      <description>&lt;P&gt;I have a script that outputs between 300 and 800 lines.  The output seems to be truncated after 138 lines.  Is there a line limit for scripted inputs, and if so, are they configurable?&lt;/P&gt;

&lt;P&gt;I have set MAX_EVENTS=1500 and still have an issue.&lt;/P&gt;</description>
      <pubDate>Thu, 23 Sep 2010 21:48:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Line-limit-for-scripted-inputs/m-p/56829#M11070</guid>
      <dc:creator>rsigle</dc:creator>
      <dc:date>2010-09-23T21:48:34Z</dc:date>
    </item>
    <item>
      <title>Re: Line limit for scripted inputs?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Line-limit-for-scripted-inputs/m-p/56830#M11071</link>
      <description>&lt;P&gt;Do you possibly have a custom LINE_BREAKER, and/or SHOULD_LINEMERGE = false set? If so, your script output may be treated as a single "line" in which case it would be truncated after 50,000 characters. You can raise this by setting &lt;CODE&gt;TRUNCATE = 999999&lt;/CODE&gt;, for example.&lt;/P&gt;

&lt;P&gt;Also, if you are running on a LWF, you should make sure that your output buffer doesn't cut off the middle of an event. It's not &lt;EM&gt;that&lt;/EM&gt; likely to happen unless the output is generated slowly enough that the LWF switches in the middle of your event, but it could happen occasionally. I don't think this is your problem if it's consistent.&lt;/P&gt;</description>
      <pubDate>Fri, 24 Sep 2010 12:30:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Line-limit-for-scripted-inputs/m-p/56830#M11071</guid>
      <dc:creator>gkanapathy</dc:creator>
      <dc:date>2010-09-24T12:30:59Z</dc:date>
    </item>
    <item>
      <title>Re: Line limit for scripted inputs?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Line-limit-for-scripted-inputs/m-p/56831#M11072</link>
      <description>&lt;P&gt;Thank you Gerald.  I have SHOULD_LINEMERGE=false set in the props.conf.  I will increase the the TRUNCATE option and report back with my results.&lt;/P&gt;

&lt;P&gt;We are running LWF, so the output buffer could be an issue, however, the data is not generated slowly, so that will be the next thing I look at.&lt;/P&gt;

&lt;P&gt;Rick&lt;/P&gt;</description>
      <pubDate>Mon, 27 Sep 2010 20:10:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Line-limit-for-scripted-inputs/m-p/56831#M11072</guid>
      <dc:creator>rsigle</dc:creator>
      <dc:date>2010-09-27T20:10:22Z</dc:date>
    </item>
    <item>
      <title>Re: Line limit for scripted inputs?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Line-limit-for-scripted-inputs/m-p/56832#M11073</link>
      <description>&lt;P&gt;Setting TRUNCATE = 999999 resolved the issue for me.  Thanks again.&lt;/P&gt;</description>
      <pubDate>Wed, 29 Sep 2010 02:35:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Line-limit-for-scripted-inputs/m-p/56832#M11073</guid>
      <dc:creator>rsigle</dc:creator>
      <dc:date>2010-09-29T02:35:21Z</dc:date>
    </item>
  </channel>
</rss>

