Splunk Search

I can`t get more than 10.000 results in a join command

jjofret
Explorer

Hi, I would like to know if there is some way to create a query where I can get more than 10.000 results when I used the join command. 

Into the limits.conf file, I can´t edit the limit for more than 10.500 results.  Do you know some way to do this  ?, at today I have a file with more than 700.000 entries. 

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Do you have to use join?  In general, they're not advised.  Please share your query and someone may be able to suggest an alternative.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...