topic Re: Is the maxout limitation of a subsearch defined as the number of events that can be used or number of rows in the result table of my subsearch? in Splunk Search https://community.splunk.com/t5/Splunk-Search/Is-the-maxout-limitation-of-a-subsearch-defined-as-the-number-of/m-p/154036#M43289 <P>Thank you!</P> Tue, 23 Dec 2014 14:19:01 GMT HeinzWaescher 2014-12-23T14:19:01Z Is the maxout limitation of a subsearch defined as the number of events that can be used or number of rows in the result table of my subsearch? https://community.splunk.com/t5/Splunk-Search/Is-the-maxout-limitation-of-a-subsearch-defined-as-the-number-of/m-p/154034#M43287 <P>Hi,</P> <P>is the maxout limitation of a subsearch defined as the number of events that can be used or the number of rows in the resulttable of my subsearch ( e.g. after stats or timechart command). I've seen both descriptions in the docs.</P> <P>BR</P> <P>Heinz</P> Fri, 19 Dec 2014 10:38:21 GMT https://community.splunk.com/t5/Splunk-Search/Is-the-maxout-limitation-of-a-subsearch-defined-as-the-number-of/m-p/154034#M43287 HeinzWaescher 2014-12-19T10:38:21Z Re: Is the maxout limitation of a subsearch defined as the number of events that can be used or number of rows in the result table of my subsearch? https://community.splunk.com/t5/Splunk-Search/Is-the-maxout-limitation-of-a-subsearch-defined-as-the-number-of/m-p/154035#M43288 <P>As per the documentation here, maxout attribute defines the no of events in the "output of the subsearch". If you're running a aggregate command in the subsearch, the limit will be applied on the output of the aggregate command, not on the no of rows processed/scanned.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.1.2/admin/Limitsconf">http://docs.splunk.com/Documentation/Splunk/6.1.2/admin/Limitsconf</A></P> Fri, 19 Dec 2014 19:50:13 GMT https://community.splunk.com/t5/Splunk-Search/Is-the-maxout-limitation-of-a-subsearch-defined-as-the-number-of/m-p/154035#M43288 somesoni2 2014-12-19T19:50:13Z Re: Is the maxout limitation of a subsearch defined as the number of events that can be used or number of rows in the result table of my subsearch? https://community.splunk.com/t5/Splunk-Search/Is-the-maxout-limitation-of-a-subsearch-defined-as-the-number-of/m-p/154036#M43289 <P>Thank you!</P> Tue, 23 Dec 2014 14:19:01 GMT https://community.splunk.com/t5/Splunk-Search/Is-the-maxout-limitation-of-a-subsearch-defined-as-the-number-of/m-p/154036#M43289 HeinzWaescher 2014-12-23T14:19:01Z