Getting Data In

Need to export the records morethan 50,000 from a job.

gumma
Loves-to-Learn

Hi all,

I am working on one application which needs to export the records into a CSV using splunk job.

i have checked the SID for that job and ran the loadjob command, it showing 70,000 records but when i export got 50,000 records.

 checked the savedsearch.conf file for that macro under /opt/splunk/etc/system/default and found that dispatch.max_count = 500000 .

so please suggest on this. Thank you.


Frontend react js
back end : splunk
splunk version : 8.2.0

Labels (1)
0 Karma

jotne
Builder
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...