Splunk Search

What is the max search limit for a macro

xyz123
Explorer

Hello,

I have a macro that calls other macros in order to have a simple view of the code search.
The thing is that when running the macro I'm getting empty values, when I select the key combination control+shIft+e then select Open in New search I get all the results, I have only power user, how can I found out what's going on.

Thanks.

Labels (1)
Tags (2)
0 Karma

tscroggins
Influencer

@xyz123 

Can you provide an example of a nested macro that doesn't work as expected?

0 Karma

xyz123
Explorer

hello,
the code contains several macros and sub searches what I did was to take out the index=Linux for example out from the macro and now it works, not sure why this set up truncated the search.

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...