https://community.splunk.com/t5/Dashboards-Visualizations/User-limit-events/m-p/562976#M46339 <P>Is there a way to tell which users are hitting their search limits? I've looked for these events in the internal indexes but cant find them. Maybe a rest search?</P> Wed, 11 Aug 2021 18:59:24 GMT pbarbuto 2021-08-11T18:59:24Z https://community.splunk.com/t5/Dashboards-Visualizations/User-limit-events/m-p/562976#M46339 <P>Is there a way to tell which users are hitting their search limits? I've looked for these events in the internal indexes but cant find them. Maybe a rest search?</P> Wed, 11 Aug 2021 18:59:24 GMT https://community.splunk.com/t5/Dashboards-Visualizations/User-limit-events/m-p/562976#M46339 pbarbuto 2021-08-11T18:59:24Z https://community.splunk.com/t5/Dashboards-Visualizations/User-limit-events/m-p/563009#M46344 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/217146">@pbarbuto</a>&nbsp;</P><P>Please use the below search. you should be able to see the reached limit messages for both user &amp; role assuming someone is hitting the limit.</P><P>index=_internal sourcetype=splunkd component=DispatchManager</P><P>&nbsp;</P><P>-- Hope this helps.</P><P>&nbsp;</P> Thu, 12 Aug 2021 01:10:37 GMT https://community.splunk.com/t5/Dashboards-Visualizations/User-limit-events/m-p/563009#M46344 anilchaithu 2021-08-12T01:10:37Z