Hello,
I am performing a search in Splunk Cloud but I am getting the following error, does anyone know how to resolve it.
The search:
index=sf-test-metrics domains NOT "sitefinity.com" NOT "*iriscodebasesandbox.cloudapp.net*" NOT "*.bedford*" NOT "*.regression.com*" NOT "dynamicscan.cloudapp.net" NOT "irisdmsitsandbox" NOT "*irisdmuatsandbox*" NOT "*.sandbox.sitefinity.com*" NOT "localhost" domains{}= *\.*
| spath path=modulesInfo{} output=x
| fields x, clientId, domains{}
| mvexpand x
| spath input=x
| search moduleName="AdminBridge"
| where extensionBundlesCount > 0
| dedup clientId
| table domains{}, extensionBundlesCount
| sort -extensionBundlesCount
The error:
command.mvexpand: output will be truncated at 37800 results due to excessive memory usage. Memory threshold of 500MB as configured in limits.conf / [mvexpand] / max_mem_usage_mb has been reached.