SPLK-1004 · Question #89
What are the default time and results limits for a subsearch?
The correct answer is A. 60 seconds and 10,000 results. The default time and results limits for a subsearch in Splunk are: Time Limit : 60 seconds Results Limit : 10,000 results Here's why this works: Time Limit : Subsearches are designed to execute quickly to avoid performance bottlenecks. By default, Splunk imposes a timeout of 60 s
Question
What are the default time and results limits for a subsearch?
Options
- A60 seconds and 10,000 results
- B60 seconds and 50,000 results
- C300 seconds and 10,000 results
- D300 seconds and 50,000 results
How the community answered
(64 responses)- A92% (59)
- B5% (3)
- C2% (1)
- D2% (1)
Explanation
The default time and results limits for a subsearch in Splunk are: Time Limit : 60 seconds Results Limit : 10,000 results Here's why this works: Time Limit : Subsearches are designed to execute quickly to avoid performance bottlenecks. By default, Splunk imposes a timeout of 60 seconds for subsearches. If the subsearch exceeds this limit, it will terminate, and the outer search may fail. Results Limit : Subsearches are also limited to returning a maximum of 10,000 results by default. This ensures that the outer search does not get overwhelmed with too much data from the
Topics
Community Discussion
No community discussion yet for this question.