Splunk Search

Will Limits.conf on an app level overwrite the default for all apps for just the one?

ZubairBMW
Engager

Hi All

If I apply a limits.conf for subsearch - maxout and searchresults - maxresultsrow for an app im deploying, will this update to limits overwrite the default for all apps or will this configuration only be applicable for the app i deploy it in 

Basically, is all limits going to be changed or just that one application

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @ZubairBMW,

limits.conf is a global configuration, even if you locate in an app, the configuration is global so applied to the full Splunk instance.

So think carefully before make this update: if it's useful only for an app, maybe it's better to modify the dashboard searches than limits.conf.

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @ZubairBMW,

limits.conf is a global configuration, even if you locate in an app, the configuration is global so applied to the full Splunk instance.

So think carefully before make this update: if it's useful only for an app, maybe it's better to modify the dashboard searches than limits.conf.

Ciao.

Giuseppe

ZubairBMW
Engager

Hi @gcusello 

Thank you very much for clearing it up

 

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...