Increase the number of lines in the log set source...

itsmevic · ‎01-21-2020

Can someone remind me of the name of the attribute used after ingesting a log to increase the amount of the log event? Let's say I want to see the first 20,000 characters of a log file. Any help is appreciated.

richgalloway · ‎01-21-2020

Are you thinking of TRUNCATE in props.conf?

---
If this reply helps you, Karma would be appreciated.

Increase the number of lines in the log set sourcetype

Splunk Mobile: Your Brand-New Home Screen

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

Are you a member of the Splunk Community?

Increase the number of lines in the log set sourcetype

Splunk Mobile: Your Brand-New Home Screen

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...