Splunk Search

Will Limits.conf on an app level overwrite the default for all apps for just the one?

ZubairBMW
Engager

Hi All

If I apply a limits.conf for subsearch - maxout and searchresults - maxresultsrow for an app im deploying, will this update to limits overwrite the default for all apps or will this configuration only be applicable for the app i deploy it in 

Basically, is all limits going to be changed or just that one application

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @ZubairBMW,

limits.conf is a global configuration, even if you locate in an app, the configuration is global so applied to the full Splunk instance.

So think carefully before make this update: if it's useful only for an app, maybe it's better to modify the dashboard searches than limits.conf.

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @ZubairBMW,

limits.conf is a global configuration, even if you locate in an app, the configuration is global so applied to the full Splunk instance.

So think carefully before make this update: if it's useful only for an app, maybe it's better to modify the dashboard searches than limits.conf.

Ciao.

Giuseppe

ZubairBMW
Engager

Hi @gcusello 

Thank you very much for clearing it up

 

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...