I'm try doing a custom transforming command, using Intersplunk, but I have a limited of 50000 events for iteration.
I know I could change in limits.conf in searchresults the parameter maxresultrows, but I want change this parameter only for my command
Alternatively, if you want to avoid limts.conf all together, you can use the maxinputs setting in commands.conf.
For example:
[your_custom_search_command]
maxinputs = 50,000
For more information about this method, see https://docs.splunk.com/Documentation/Splunk/latest/Admin/Commandsconf.
Hi!
You should be able to limit search results for your specific command by creating a separate stanza for your command in limits.conf. Then, you can use the maxresultrows parameter to limit search results to 50,000.
For example:
[your_custom_search_command]
maxresultrows = 50,000
For more information about using limits.conf to apply limits to specific search commands, see https://docs.splunk.com/Documentation/Splunk/latest/Admin/Limitsconf.
Hope this helps!