polikarpov

Topics I've Started

I have applied MAX_EVENTS 40000 for the the _json source type, big fields become searchable, but field name was not extracted. I tried to add maxchars. It did not help as well. Is there any way how to make Splunk Cloud extract big fields (above 20K)?

Posts	1
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎08-23-2021

Online Status	Offline
Date Last Visited	‎09-04-2021 10:32 AM

Re: Splunk Cloud: Increase limit in field extracti...