topic Subsearch produced 65000000 results, trunacting to maxout 50000 in Splunk Search https://community.splunk.com/t5/Splunk-Search/Subsearch-produced-65000000-results-trunacting-to-maxout-50000/m-p/445629#M126403 <P>I have the following query:<BR /> |tstats values(field1) as f1 values(field2) as f2 where index=INDEX1 [|tstats count where index=INDEX2 by field3 | table field3 | rename field3 as f3] by f3 | sort -fX</P> <P>What I execute the query above I got the following:<BR /> Subsearch produced 65000000 results, trunacting to maxout 50000</P> <P>What can I do to solve it? </P> Sun, 30 Jun 2019 12:00:41 GMT yko84109 2019-06-30T12:00:41Z Subsearch produced 65000000 results, trunacting to maxout 50000 https://community.splunk.com/t5/Splunk-Search/Subsearch-produced-65000000-results-trunacting-to-maxout-50000/m-p/445629#M126403 <P>I have the following query:<BR /> |tstats values(field1) as f1 values(field2) as f2 where index=INDEX1 [|tstats count where index=INDEX2 by field3 | table field3 | rename field3 as f3] by f3 | sort -fX</P> <P>What I execute the query above I got the following:<BR /> Subsearch produced 65000000 results, trunacting to maxout 50000</P> <P>What can I do to solve it? </P> Sun, 30 Jun 2019 12:00:41 GMT https://community.splunk.com/t5/Splunk-Search/Subsearch-produced-65000000-results-trunacting-to-maxout-50000/m-p/445629#M126403 yko84109 2019-06-30T12:00:41Z Re: Subsearch produced 65000000 results, trunacting to maxout 50000 https://community.splunk.com/t5/Splunk-Search/Subsearch-produced-65000000-results-trunacting-to-maxout-50000/m-p/445630#M126404 <P>@yko84109, please follow the instructions given by @inventsekar at <A href="https://answers.splunk.com/answers/577392/subsearch-produced-50000-results-truncating-to-max.html">Subsearch produced 50000 results, truncating to maxout 50000</A></P> Sun, 30 Jun 2019 16:10:02 GMT https://community.splunk.com/t5/Splunk-Search/Subsearch-produced-65000000-results-trunacting-to-maxout-50000/m-p/445630#M126404 ddrillic 2019-06-30T16:10:02Z Re: Subsearch produced 65000000 results, trunacting to maxout 50000 https://community.splunk.com/t5/Splunk-Search/Subsearch-produced-65000000-results-trunacting-to-maxout-50000/m-p/445631#M126405 <P>What are you trying to do with this search?</P> Mon, 01 Jul 2019 01:10:51 GMT https://community.splunk.com/t5/Splunk-Search/Subsearch-produced-65000000-results-trunacting-to-maxout-50000/m-p/445631#M126405 jkat54 2019-07-01T01:10:51Z