topic Re: How to set a single sourcetype Max Events in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-set-a-single-sourcetype-Max-Events/m-p/441968#M77042 <P>yes you can certainly do that within <CODE>local</CODE> folder within the same app.</P> <P>1) go to app etc&gt;apps&gt;appname&gt;local&gt;props.conf <BR /> 2) set MAX_EVENT for that sourcetype<BR /> you would find global MAX_EVENT limit set in <CODE>default</CODE> folder just do the same in <CODE>local</CODE> folder with appropriate value.</P> <PRE><CODE>[your_sourcetype] MAX_EVENTS = &lt;integer&gt; </CODE></PRE> Wed, 30 Sep 2020 01:42:13 GMT mayurr98 2020-09-30T01:42:13Z How to set a single sourcetype Max Events https://community.splunk.com/t5/Getting-Data-In/How-to-set-a-single-sourcetype-Max-Events/m-p/441967#M77041 <P>I have a single sourcetype that has large log files. I don't want to change the global MAX_EVENT limit, but instead, change the single sourcetype MAX_EVENT limit to a larger number. <BR /> Is this possible within the props.conf?</P> Wed, 30 Sep 2020 01:42:10 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-set-a-single-sourcetype-Max-Events/m-p/441967#M77041 shifflett46 2020-09-30T01:42:10Z Re: How to set a single sourcetype Max Events https://community.splunk.com/t5/Getting-Data-In/How-to-set-a-single-sourcetype-Max-Events/m-p/441968#M77042 <P>yes you can certainly do that within <CODE>local</CODE> folder within the same app.</P> <P>1) go to app etc&gt;apps&gt;appname&gt;local&gt;props.conf <BR /> 2) set MAX_EVENT for that sourcetype<BR /> you would find global MAX_EVENT limit set in <CODE>default</CODE> folder just do the same in <CODE>local</CODE> folder with appropriate value.</P> <PRE><CODE>[your_sourcetype] MAX_EVENTS = &lt;integer&gt; </CODE></PRE> Wed, 30 Sep 2020 01:42:13 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-set-a-single-sourcetype-Max-Events/m-p/441968#M77042 mayurr98 2020-09-30T01:42:13Z Re: How to set a single sourcetype Max Events https://community.splunk.com/t5/Getting-Data-In/How-to-set-a-single-sourcetype-Max-Events/m-p/441969#M77043 <P>Thank you so much! Will do!</P> Fri, 09 Aug 2019 17:34:52 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-set-a-single-sourcetype-Max-Events/m-p/441969#M77043 shifflett46 2019-08-09T17:34:52Z