https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372111#M165840 <P>Not much luck so far - </P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/3596i4F0B0234C047B110/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P><span class="lia-inline-image-display-wrapper" image-alt="![alt text][2]"><img src="https://community.splunk.com/t5/image/serverpage/image-id/3597i4AC14E4904A49BF5/image-size/large?v=v2&amp;px=999" role="button" title="![alt text][2]" alt="![alt text][2]" /></span></P> Tue, 10 Oct 2017 14:29:37 GMT ddrillic 2017-10-10T14:29:37Z https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372106#M165835 <P>We reached the limit of 500K results per saved search. We wonder if we can increase to, let's say 10 million, for one specific app.</P> <P>We see <A href="https://answers.splunk.com/answers/334110/is-there-a-setting-for-the-maximum-number-of-resul.html">Is there a setting for the maximum number of results that can be written to a summary index from a single saved search?</A></P> <P>But it doesn't refer to one specific app.</P> Mon, 02 Oct 2017 19:13:19 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372106#M165835 ddrillic 2017-10-02T19:13:19Z https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372107#M165836 <P>Change the <STRONG>dispatch.max_count</STRONG> in <STRONG>savedsearches.conf</STRONG> and place it in <STRONG>$SPLUNK_HOME/etc/apps/appName/local</STRONG></P> Mon, 02 Oct 2017 20:27:58 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372107#M165836 abhishekreddy 2017-10-02T20:27:58Z https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372108#M165837 <P>Great! on the search heads, right? sanity check ; -) </P> Tue, 03 Oct 2017 17:05:39 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372108#M165837 ddrillic 2017-10-03T17:05:39Z https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372109#M165838 <P>Obviously <span class="lia-unicode-emoji" title=":face_with_tongue:">😛</span></P> Tue, 03 Oct 2017 21:20:22 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372109#M165838 abhishekreddy 2017-10-03T21:20:22Z https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372110#M165839 <P>; - ) interestingly, the following <A href="https://answers.splunk.com/answers/1942/why-are-only-10-000-events-making-it-into-the-summary-index.html" target="_blank">Why are only 10,000 events making it into the summary index?</A></P> <P>says -</P> <P>-- ALSO, in etc/system/local/limits.conf (create it if it doesn't exist), under the [scheduler] stanza, set max_action_results=100000 (or a limit of your choosing). </P> <P>Not sure if it's applicable ...</P> Tue, 29 Sep 2020 16:05:19 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372110#M165839 ddrillic 2020-09-29T16:05:19Z https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372111#M165840 <P>Not much luck so far - </P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/3596i4F0B0234C047B110/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P><span class="lia-inline-image-display-wrapper" image-alt="![alt text][2]"><img src="https://community.splunk.com/t5/image/serverpage/image-id/3597i4AC14E4904A49BF5/image-size/large?v=v2&amp;px=999" role="button" title="![alt text][2]" alt="![alt text][2]" /></span></P> Tue, 10 Oct 2017 14:29:37 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-increase-the-results-limit-of-saved-searches/m-p/372111#M165840 ddrillic 2017-10-10T14:29:37Z