Hello,
Unfortunately, my complete query does not go through because of the following error:
The search auto-finalized after it reached its time limit: 60 seconds.
Now I read that I could change this in the limits.conf, but I don't have a local splunk app. It all runs through Splunk's website (8.0.2) via the Search & Reporting app. Can I make any settings there so that my search runs through?
Hi @exchanger,
You can use "Send the job to the background" option in Job menu and you can get an email when search finishes.
https://docs.splunk.com/Documentation/Splunk/8.1.2/Search/Aboutjobsandjobmanagement#Job_menu