![]() ![]() Under Note, read the information about he eventstats command and how the max_mem_usage_mb and the maxresultrows settings are used to determine the maximum number of results to return.Under the stanza, look for the max_mem_usage_mb setting.Open or create a local nf file at $SPLUNK_HOME/etc/system/local. ![]() Make changes to the files in the local directory. The files in the default directory must remain intact and in their original location. Never change or copy the configuration files in the default directory. See Where you can place (or find) your modified configuration files in the Splunk Enterprise Admin Manual. There can be configuration files with the same name in your default, local, and app directories.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |