searching time limit

[yohhpark]

I have a search that takes quite some time to run.

*using py to run the search with splunk api

it returns by saying it "role-based disk usage quita of search artifacts for user "test" has been reached (used 192mb quota=100mb) 

how can I increase the disk quota?

[isoutamo]

Hi

If you haven't admin access then ask from your admin that you are needing more disk quota.

If you are admin then you should update authorize.cond (actually create new file under local) and increase srchDiskQuota attribute value.

r. Ismo

[yohhpark]

thank you. if I'd like to perform taht myself, would i use limit.conf?

do you happen to have the link that I can possibly take look at?

thankyou

[isoutamo]

Here is link to document https://docs.splunk.com/Documentation/Splunk/latest/Admin/Authorizeconf

Another option is use GUI Settings-> Roles 

select roles and then resources tab.