Splunk search - logs retrieval limitation

[nivi]

While doing a splunk search using a splunk query and retrieving logs in an automated matter, the job extraction only a maximum of 2 lakhs of logs. How to resolve this issue

[richgalloway]

Please tell us more about the automated method you are using.  Which method is it?  Does it specify the maxout parameter?

You may find some help at https://hurricanelabs.com/splunk-tutorials/the-best-guide-for-exporting-massive-amounts-of-data-from...

[inventsekar]

Hi @nivi ... please check the limits.conf file.. 

[searchresults]
maxresultrows = 50000
# maximum number of times to try in the atomic write operation (1 = no retries)

https://docs.splunk.com/Documentation/Splunk/9.1.1/Admin/Limitsconf#limits.conf.example

may we know more details like.. is it a csv log or regular log file or something else..

Splunk enterprise or Splunk cloud?

are you planning to increase or decrease this limit (2 lakh logs itself is a very big limit).