https://community.splunk.com/t5/Getting-Data-In/Is-there-a-limit-on-json-arrays/m-p/18304#M2482 <P>Hi,<BR /> I import a json-file with a json-object that contains an array with another 50 json-objects. It looks like, that the (multiline) event is not read in till to the end, but my truncate and max_events are big enough. <BR /> I have SHOULD_LINEMERGE = true, truncate=0 and max_events=10000. Is there perhaps another (hidden) parameter to control event-length or json-objects? </P> <P>best regards <BR /> Marco </P> Mon, 28 Sep 2020 13:47:55 GMT marcokrueger 2020-09-28T13:47:55Z https://community.splunk.com/t5/Getting-Data-In/Is-there-a-limit-on-json-arrays/m-p/18304#M2482 <P>Hi,<BR /> I import a json-file with a json-object that contains an array with another 50 json-objects. It looks like, that the (multiline) event is not read in till to the end, but my truncate and max_events are big enough. <BR /> I have SHOULD_LINEMERGE = true, truncate=0 and max_events=10000. Is there perhaps another (hidden) parameter to control event-length or json-objects? </P> <P>best regards <BR /> Marco </P> Mon, 28 Sep 2020 13:47:55 GMT https://community.splunk.com/t5/Getting-Data-In/Is-there-a-limit-on-json-arrays/m-p/18304#M2482 marcokrueger 2020-09-28T13:47:55Z https://community.splunk.com/t5/Getting-Data-In/Is-there-a-limit-on-json-arrays/m-p/18305#M2483 <P>According to this answer, there is a limit if you use <CODE>INDEXED EXTRACTIONS = JSON</CODE> but not if you use <CODE>KV_MODE = json</CODE>:</P> <P><A href="https://answers.splunk.com/answers/319059/indexed-extractions-json-limiting-multivalued-fiel.html">https://answers.splunk.com/answers/319059/indexed-extractions-json-limiting-multivalued-fiel.html</A></P> Wed, 14 Oct 2015 19:29:35 GMT https://community.splunk.com/t5/Getting-Data-In/Is-there-a-limit-on-json-arrays/m-p/18305#M2483 woodcock 2015-10-14T19:29:35Z