Splunk Search

What is the max search limit for a macro

xyz123
Explorer

Hello,

I have a macro that calls other macros in order to have a simple view of the code search.
The thing is that when running the macro I'm getting empty values, when I select the key combination control+shIft+e then select Open in New search I get all the results, I have only power user, how can I found out what's going on.

Thanks.

Tags (2)
0 Karma

tscroggins
Influencer

@xyz123 

Can you provide an example of a nested macro that doesn't work as expected?

0 Karma

xyz123
Explorer

hello,
the code contains several macros and sub searches what I did was to take out the index=Linux for example out from the macro and now it works, not sure why this set up truncated the search.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...