Splunk Search

search auto-finalized after time limit: 60 seconds / limits.conf

exchanger
Path Finder

Hello,

 

Unfortunately, my complete query does not go through because of the following error:
The search auto-finalized after it reached its time limit: 60 seconds.

Now I read that I could change this in the limits.conf, but I don't have a local splunk app. It all runs through Splunk's website (8.0.2) via the Search & Reporting app. Can I make any settings there so that my search runs through?

Labels (1)

scelikok
SplunkTrust
SplunkTrust

Hi @exchanger,

You can use "Send the job to the background" option in Job menu and you can get an email when search finishes.

https://docs.splunk.com/Documentation/Splunk/8.1.2/Search/Aboutjobsandjobmanagement#Job_menu

 

If this reply helps you an upvote is appreciated.
Get Updates on the Splunk Community!

Dashboard Studio Challenge - Learn New Tricks, Showcase Your Skills, and Win Prizes!

Reimagine what you can do with your dashboards. Dashboard Studio is Splunk’s newest dashboard builder to ...

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...