Hi,
I have thousands of lines coming int dbx_debug (process count=6000 results...), and I'd like to limit it. Is there a parameter that will do this?
Hi. You might try checking the log level setting in $SPLUNK_HOME/etc/apps/dbx/default/java.conf. (If you need to edit the level setting, make sure you copy the stanza from the java.conf in the default directory to the java.conf in the local directory, and make your edits there.)
For more info on java.conf, see this doc: http://docs.splunk.com/Documentation/DBX/latest/DeployDBX/javaspec