CODEWITHSUNDEEP
indexingfieldlimitsplunk-cloud
Akhil
Akhil

Reputation: 1

Splunk fields extraction limit for specific Index

In Limits.conf fields is limited to 200 we want 500 fields extraction for specific index . Tried giving limits to sourcetype of the index but not working . If we give it in limits.conf it will effect every index leading to high storage use . Is there a way to change field extraction for specific index

Upvotes: 0

Views: 1708

Answers (1)

RichG
RichG

Reputation: 9906

Changing limits.conf affects the entire system. There is no setting governing the number of fields each index can extract.

Changing limits.conf will not necessarily increase storage use as it will depend on the actual number of fields extracted.

Upvotes: 0

Related Questions