https://community.splunk.com/t5/Reporting/max-search-length/m-p/76512#M1748 <P>Is splunk having max search length limitation?when i search host="xxx" AND (SRC_IP="xxx OR ...) almost 26000 characters to filter the specific ip zone, the search results can be shown fine, but when generating the report or entering the job management, the splunk will say XMLSyntaxError: Start tag expected, '&lt;' not found, line 1, column 1, it seems likely a char. length problem in parenthesis, any solution to this? we use 4.1.4 version,Thanks </P> Mon, 25 Oct 2010 13:29:04 GMT hjwang 2010-10-25T13:29:04Z https://community.splunk.com/t5/Reporting/max-search-length/m-p/76512#M1748 <P>Is splunk having max search length limitation?when i search host="xxx" AND (SRC_IP="xxx OR ...) almost 26000 characters to filter the specific ip zone, the search results can be shown fine, but when generating the report or entering the job management, the splunk will say XMLSyntaxError: Start tag expected, '&lt;' not found, line 1, column 1, it seems likely a char. length problem in parenthesis, any solution to this? we use 4.1.4 version,Thanks </P> Mon, 25 Oct 2010 13:29:04 GMT https://community.splunk.com/t5/Reporting/max-search-length/m-p/76512#M1748 hjwang 2010-10-25T13:29:04Z https://community.splunk.com/t5/Reporting/max-search-length/m-p/76513#M1749 <P>i found when i group this long search command by using eventtype and search with eventtype="xxx", it seems ok, some strange bug?</P> Mon, 25 Oct 2010 18:17:17 GMT https://community.splunk.com/t5/Reporting/max-search-length/m-p/76513#M1749 hjwang 2010-10-25T18:17:17Z https://community.splunk.com/t5/Reporting/max-search-length/m-p/76514#M1750 <P>Use a lookup table rather than a long list of AND/OR expressions.</P> Wed, 11 May 2011 16:05:00 GMT https://community.splunk.com/t5/Reporting/max-search-length/m-p/76514#M1750 transamrit 2011-05-11T16:05:00Z