How to limit on uploading of csv lookup by size?

[bapun18]

How to limit on uploading of CSV lookup by size.

Hi,
I want to restrict the upload of lookup files with a certain size, like let's say a user with some role has permission of uploading a lookup file, but I want to filter it in that role so that the user can able to upload or create a CSV lookup file but with 5MB not more than that.

[tscroggins]

Hi,

The maximum request body size is controlled globally using the web.conf default stanza max_upload_size setting: https://docs.splunk.com/Documentation/Splunk/9.0.4/Admin/Webconf 

A value of 5 will limit uploads to 5 MiB (5 * 1024 * 1024 bytes). The POST request will return status 413 if the content size exceeds the limit; however, no feedback will be displayed to the user.

Note this also limits the size of files uploaded using Settings > Add Data, the size of apps installed using Apps > Manage Apps, and any other large request sent to Splunk Web.

[bapun18]

Hi, thanks for the response, but my requirement is for specific roles, don't want to change it globally.

[tscroggins]

It's only manageable globally, unfortunately.