Reporting

Maximum result on the scheduled search

k2bruce
New Member

Hi,

I have created a number of scheduled search jobs with email alert action, I find that the maximum records in the email attachment (.csv) is 10000 lines. May you advise where I can config the max lines in the email alert attachment as some records are missing now.

Thanks,
Bruce

0 Karma

k2bruce
New Member

I have add the below config in limit.conf but still not work, not sure any other setting, would you please advise? Thanks.

[scheduler]
max_action_results = 100000

0 Karma

kml_uvce
Builder
0 Karma
Get Updates on the Splunk Community!

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...

Platform Highlights | January 2023 Newsletter

 January 2023Peace on Earth and Peace of Mind With Business ResilienceAll organizations can start the new year ...