Hi,
I have created a number of scheduled search jobs with email alert action, I find that the maximum records in the email attachment (.csv) is 10000 lines. May you advise where I can config the max lines in the email alert attachment as some records are missing now.
Thanks,
Bruce
I have add the below config in limit.conf but still not work, not sure any other setting, would you please advise? Thanks.
[scheduler]
max_action_results = 100000
edit in limits.conf
http://docs.splunk.com/Documentation/Splunk/latest/Admin/Limitsconf