Splunk Dev

No input limit for python custom command

santosm
New Member

I'm try doing a custom transforming command, using Intersplunk, but I have a limited of 50000 events for iteration.

I know I could change in limits.conf in searchresults the parameter maxresultrows, but I want change this parameter only for my command

0 Karma

tcole_splunk
Splunk Employee
Splunk Employee

Alternatively, if you want to avoid limts.conf all together, you can use the maxinputs setting in commands.conf.

For example:

[your_custom_search_command]

maxinputs = 50,000

For more information about this method, see https://docs.splunk.com/Documentation/Splunk/latest/Admin/Commandsconf.

tcole_splunk
Splunk Employee
Splunk Employee

Hi!

You should be able to limit search results for your specific command by creating a separate stanza for your command in limits.conf. Then, you can use the maxresultrows parameter to limit search results to 50,000.

For example:

[your_custom_search_command]

maxresultrows = 50,000

For more information about using limits.conf to apply limits to specific search commands, see https://docs.splunk.com/Documentation/Splunk/latest/Admin/Limitsconf.

Hope this helps! 

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...