Hunk search only retrieves 1000 events. How to modify this limit?

[benoitleroux]

Using Hunk, each search retrieves only 1000 results. Is this set in the etc/system/default/limits.conf? If so which key is it? I tried to modify some of them without success.

[benoitleroux]

Thanks it does affect it. max_events_per_bucket was not present in the fresh installed.

[rdagan_splunk · Accepted solution]

Try this: In limits.conf, change the following line. Default is 1000.
max_events_per_bucket = 1000

[benoitleroux]

Thanks it does affect it. max_events_per_bucket was not present etc/system/default/limits.conf in the fresh installed of last version.