Getting Data In

Events being cut when Linecount > 206. How to increase this limit?

skoelpin
SplunkTrust
SplunkTrust

For a web service call, my event has a linecount=220. But when looking at the response in Splunk, it is cutting the end part of my response and narrowing it down to 206 lines. How can I increase the linecount in my events so I get the entire response?

1 Solution

lmyrefelt
Builder

Can you give us example(s) ?
And please include the config regarding your sourcetypes settings ...

Otherwise all we can do is guesss

View solution in original post

lmyrefelt
Builder

Can you give us example(s) ?
And please include the config regarding your sourcetypes settings ...

Otherwise all we can do is guesss

skoelpin
SplunkTrust
SplunkTrust

I was able to solve it by editing the props.conf file. Thanks for inquiring though!

Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...