Hi There,
I would like to export the results of kv lookup file in a lookup editor, but the results after exporting is only 50k records, even the original results is 80k records, How to download the entire results in a single file?
Thanks!
Hi @smanojkumar,
are you trying to export rows from a KV Store lookup using the inputlookup command or the Lookup Editor App?
Inputllokup has the limit of 50,000 results, but the export from the Lookup Editor shouldn't have this limit.
Ciao.
Giuseppe
I'm trying to use lookup Editor app.
Hi @smanojkumar,
at first see if the solution from @woodcock solves your requirement https://community.splunk.com/t5/Splunk-Search/How-can-I-escape-the-50K-subsearch-limit-while-linking...
otherwise, you could modify limits.conf:
[searchresults]
maxresultrows = 100000
[stats]
maxresultrows = 100000
[top]
maxresultrows = 100000
Ciao.
Giuseppe
We need to modify in all these 3 places in limits.config file? [searchresults] maxresultrows = 100000 [stats] maxresultrows = 100000 [top] maxresultrows = 100000
Hi @gcusello ,
Any other way other than this.
Hi @smanojkumar,
yes, I used 100000 in my example, but if you have less rown, you can use a minor number.
Ciao.
Giuseppe
Hi @gcusello ,
I had changed those limits to 500000, even I can't export more than 50k rows.
Thanks.