Splunk Search

ML Users hitting Limits


Our ML team use the API to export large numbers of events for model training.

They are hitting limits: [searchresults] maxresultrows and [subsearch] maxout

We do not want to increase these limits as they are global and, although we trust the ML team, we don't trust other users.

Anyone else managed to solve this problem?


Labels (1)
0 Karma