i dont think there is a link or filter for that. i bet someone in splunk (the company) has access to the splunkbase website back-end database and can query it most of the paid apps say so, or direct you to another website. hope it helps ... View more

The default event size limit is 10000 characters. You can override this in props.conf as follows [yoursourcetypehere] TRUNCATE = 0 MAX_EVENTS = 10000 Setting TRUNCATE to zero means "no truncation". MAX_EVENTS actually sets "the maximum number of lines per event." MAX_EVENTS only applies to multi-line events, but the default is 256 lines. If you are dealing with multi-line events, you may want to set this to a much larger value. You can put the props.conf file under an application, if it is application-specific, or under /etc/system/local ... View more

Did you fix it? ... View more

I am running on rhel 6.1 ... View more