I can`t get more than 10.000 results in a join com...

jjofret · ‎10-29-2020

Hi, I would like to know if there is some way to create a query where I can get more than 10.000 results when I used the join command.

Into the limits.conf file, I can´t edit the limit for more than 10.500 results. Do you know some way to do this ?, at today I have a file with more than 700.000 entries.

richgalloway · ‎10-29-2020

Do you have to use join? In general, they're not advised. Please share your query and someone may be able to suggest an alternative.

---
If this reply helps you, Karma would be appreciated.

I can`t get more than 10.000 results in a join command

join

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Are you a member of the Splunk Community?

I can`t get more than 10.000 results in a join command

join

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever