SPLK-1004 · Question #86
What is the default time limit for a subsearch to complete?
The correct answer is D. 60 seconds. The default time limit for a subsearch to complete in Splunk is 60 seconds . If the subsearch exceeds this time limit, it will terminate, and the outer search may fail or produce incomplete Here's why this works: Subsearch Timeout : Subsearches are designed to execute quickly…
Question
What is the default time limit for a subsearch to complete?
Options
- A10 minutes
- B120 seconds
- C5 minutes
- D60 seconds
How the community answered
(26 responses)- A4% (1)
- B4% (1)
- D92% (24)
Explanation
The default time limit for a subsearch to complete in Splunk is 60 seconds . If the subsearch exceeds this time limit, it will terminate, and the outer search may fail or produce incomplete Here's why this works: Subsearch Timeout : Subsearches are designed to execute quickly and provide results to the outer search. To prevent performance issues, Splunk imposes a default timeout of 60 seconds. Configuration : The timeout can be adjusted using the subsearch_maxout and subsearch_timeout settings in limits.conf, but the default remains 60 seconds.
Topics
Community Discussion
No community discussion yet for this question.