Splunk Search

transaction eventcount limit?

halperkins
New Member

It appears there seems to be a limit of the number of events can be in a transaction.
I am doing transactions, and it seems when the number of transactions is over 90 and I export it to CSV, it appears that the multivalued field "breaks" and the rest of the transactions spill out into other cells.
Is this an excel issue, or splunk issue?
thanks

Tags (1)
0 Karma

bmacias84
Champion

The limits.conf you can change search and search commands maximums. There are to setting for transactions maxopenevents and maxopentxn. Though I don't think you would be hitting those limits. It's possible you are hitting search result limits. Be specific with your sources and indices if your transactions span multiple systems.

Cheers

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...