This is not current Splunk documentation.
Splunk 3.4.2 is the latest version. Only use this page with older Splunk 2.0.x.
Splunk 3.4.2 is the latest version. Only use this page with older Splunk 2.0.x.
Splunk User Manual (Splunk v2.0)
Faster Splunking Tricks
Use maxresults::
To control the length of a search (and hence its speed) add the maxresults:: modifer to specify the number of results after which it should finish.
No comments have been submitted.