Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Can I change TRUNCATE and MAX_EVENTS to unlimited ?

$
0
0

I have large logs, with more than 10000 chars per line, and multiline events as large as whole XML file. They are always truncated or cut in multiple events because too long.

It seems that the default is

MAX_EVENTS=250 TRUNCATE=10000

Can I push them to unlimited (i.e. 0)?


Viewing all articles
Browse latest Browse all 13053

Trending Articles