- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is there any controls to limit the size of a user search?

rbal_splunk

Splunk Employee
07-25-2022
08:58 AM
Is there any controls to limit the size of a user search? The use case is Splunk Cloud and limiting a search, if it downloads for example more than 10TB from SmartyStore to the cache.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

rbal_splunk

Splunk Employee
07-25-2022
09:03 AM
you would be controlling this with `authorize.conf` srchTimeWin srchTimeEarliest and WLM rules
