Reporting

What is the max number of saved searches a splunk server can hold?

clyde772
Communicator

What is the max number of saved searches a splunk server can hold? And what would be a suggested number of max saved searches in a system?

I am trying to register a saved search for each 100+ UNIX process checking "saved searches".

Tags (1)
0 Karma

gkanapathy
Splunk Employee
Splunk Employee

I take it you mean scheduled searches, vs sets of stored results.

If you just mean to ask how many can be saved, there's not a hard limit, and several hundred is defintely not a problem.

On the other hand, if you want to schedule and run all 100+ searches, it entirely depends on how many run at the same time (which depends on how they are scheduled and how long they take to complete), as well as the hardware you're running on.

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...