Splunk Search

Error in IndexScopedSearch

indeed_2000
Motivator

Hi 

I got this error when I search on specific index.

index="myindex"

Error in 'IndexScopedSearch': The search failed. More than 1000000 events found at time 1637181000.
 
1-what is the reason of this error?
2-how can I resolve this issue?
 
Any idea?
Thanks,
 
 
 
Labels (4)
Tags (4)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Check limits.conf and modify accordingly.

0 Karma

indeed_2000
Motivator

check limits.conf but can't find IndexScopedSearch

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Observability - October 2025

What’s New?  We’re excited to announce the latest enhancements to Splunk Observability Cloud and share what’s ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened Audit Trail v2 wasn’t written in isolation—it was shaped by your voices. In ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...