Splunk Search

Will Limits.conf on an app level overwrite the default for all apps for just the one?

ZubairBMW
Engager

Hi All

If I apply a limits.conf for subsearch - maxout and searchresults - maxresultsrow for an app im deploying, will this update to limits overwrite the default for all apps or will this configuration only be applicable for the app i deploy it in 

Basically, is all limits going to be changed or just that one application

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @ZubairBMW,

limits.conf is a global configuration, even if you locate in an app, the configuration is global so applied to the full Splunk instance.

So think carefully before make this update: if it's useful only for an app, maybe it's better to modify the dashboard searches than limits.conf.

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @ZubairBMW,

limits.conf is a global configuration, even if you locate in an app, the configuration is global so applied to the full Splunk instance.

So think carefully before make this update: if it's useful only for an app, maybe it's better to modify the dashboard searches than limits.conf.

Ciao.

Giuseppe

ZubairBMW
Engager

Hi @gcusello 

Thank you very much for clearing it up

 

0 Karma
Get Updates on the Splunk Community!

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...