Monitoring Splunk

How do I change max_mem_usage_mb in limits.conf for Spunk Cloud?

dphung
Explorer

I'm seeing this warning for my search query:
WARN: mvexpand output will be truncated due to excessive memory usage

All Splunk answers point me to changing the max_mem_usage_mb in limits.conf but I'm using Splunk Cloud and I don't see a setting under

Settings -> All configurations

Tags (3)
0 Karma
1 Solution

esix_splunk
Splunk Employee
Splunk Employee

You cannot modify this yourself with Splunk Cloud. You will need to open a support ticket and they will assist.

However, Cloud is tuned for the instances provisioned and mvexpand is very expensive to use, especially in large datasets.. So you may want to look at tuning your search.

View solution in original post

esix_splunk
Splunk Employee
Splunk Employee

You cannot modify this yourself with Splunk Cloud. You will need to open a support ticket and they will assist.

However, Cloud is tuned for the instances provisioned and mvexpand is very expensive to use, especially in large datasets.. So you may want to look at tuning your search.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...