All Apps and Add-ons

Why are search results limited to only 100000 results when there are actually more results?

raghu0463
Explorer

Hi,

When i run a search i was able to see only 100000 results but actually it as like 170000 results. I don't know why its giving less number of results.

0 Karma
1 Solution

cmerriman
Super Champion

what is your search command? chart or timechart? use limit=0 to eliminate the limit.

otherwise, can we see what the search is?

View solution in original post

cmerriman
Super Champion

what is your search command? chart or timechart? use limit=0 to eliminate the limit.

otherwise, can we see what the search is?

raghu0463
Explorer

im running the search in db connect, i didn't use any chart or timechart

0 Karma

cmerriman
Super Champion

try adding maxrows=0 in your dbxquery

my typical dbxquery looks like this:
|dbxquery connection=DB shortnames=t maxrows=0 query="select ....."

horsefez
Motivator

go to db-connect app folder under local and edit inputs.conf where you can find the parameter "max_rows" as well

0 Karma

raghu0463
Explorer

thanks, now im getting all the results but unable to load it to the database ..

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...