Splunk Search

Will Limits.conf on an app level overwrite the default for all apps for just the one?

ZubairBMW
Engager

Hi All

If I apply a limits.conf for subsearch - maxout and searchresults - maxresultsrow for an app im deploying, will this update to limits overwrite the default for all apps or will this configuration only be applicable for the app i deploy it in 

Basically, is all limits going to be changed or just that one application

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @ZubairBMW,

limits.conf is a global configuration, even if you locate in an app, the configuration is global so applied to the full Splunk instance.

So think carefully before make this update: if it's useful only for an app, maybe it's better to modify the dashboard searches than limits.conf.

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @ZubairBMW,

limits.conf is a global configuration, even if you locate in an app, the configuration is global so applied to the full Splunk instance.

So think carefully before make this update: if it's useful only for an app, maybe it's better to modify the dashboard searches than limits.conf.

Ciao.

Giuseppe

ZubairBMW
Engager

Hi @gcusello 

Thank you very much for clearing it up

 

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...