https://community.splunk.com/t5/Splunk-Search/Subsearch-limit-is-10-500-results/m-p/74103#M18613 <P>The subsearch documentation says the following:</P> <BLOCKQUOTE> <P>maxout = <INTEGER><BR /> * Maximum number of results to return from a subsearch.<BR /> * This number cannot be greater than or equal to 10500.</INTEGER></P> </BLOCKQUOTE> <P>What if choose not to modify limits.conf ? will I still get a result set that isn't greater than 10500 ? </P> <P>What I'm trying to understand is whether a subsearch is limited by default. </P> <P>Thanks.</P> Tue, 13 Sep 2011 12:20:42 GMT oreni 2011-09-13T12:20:42Z https://community.splunk.com/t5/Splunk-Search/Subsearch-limit-is-10-500-results/m-p/74103#M18613 <P>The subsearch documentation says the following:</P> <BLOCKQUOTE> <P>maxout = <INTEGER><BR /> * Maximum number of results to return from a subsearch.<BR /> * This number cannot be greater than or equal to 10500.</INTEGER></P> </BLOCKQUOTE> <P>What if choose not to modify limits.conf ? will I still get a result set that isn't greater than 10500 ? </P> <P>What I'm trying to understand is whether a subsearch is limited by default. </P> <P>Thanks.</P> Tue, 13 Sep 2011 12:20:42 GMT https://community.splunk.com/t5/Splunk-Search/Subsearch-limit-is-10-500-results/m-p/74103#M18613 oreni 2011-09-13T12:20:42Z https://community.splunk.com/t5/Splunk-Search/Subsearch-limit-is-10-500-results/m-p/74104#M18614 <P>A subsearch is limited by default and it is meant to be used for small searches.</P> <P>You can find more useful on this page:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/4.2.3/User/HowSubsearchesWork">http://docs.splunk.com/Documentation/Splunk/4.2.3/User/HowSubsearchesWork</A></P> Tue, 13 Sep 2011 14:29:12 GMT https://community.splunk.com/t5/Splunk-Search/Subsearch-limit-is-10-500-results/m-p/74104#M18614 mzorzi 2011-09-13T14:29:12Z