Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Output Results to Lookup Truncating Results

$
0
0
Hello, Hoping for some guidance. I have a scheduled report that has been running weekly for several months now without any issues. I am outputting the results to a lookup file and replacing the results with each run. As of this week the lookup no longer contains all of the results, it is limited to 175,000 results. If I run the report manually as a search and export it, I get the correct results 181,113 I haven't been able to find any info related to limits on lookups. Is there a conf file config related to max results or max file size? The latest file was 36.1 MB. Any help would be greatly appreciated! Thank you.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>