Splunk Search

Splunk DB Connect: Is there a way to stop the dboutput command from restricting the result set to 50,000 rows?

cnikitaras
Explorer

Hello,
I’m trying to send data to a SQL database using the dboutput command and my result set is being restricted to 50,000 rows. I’ve added streaming=true to my search hoping that it would bypass this restriction but it has not worked. Removing the dboutput command allows the entire result set to be displayed. Is there a specific configuration needed to allow a large number of records to be sent with this command? My row count is approximately 500,000 rows.
Thank you.

twinspop
Influencer

Did you find a solution?

jamesmarlowww
Path Finder

I'd also be very interest if you found a solution?

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

Streaming=true is expected to work without a limit, what's the database? what's the driver?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...