SafeAF / enterprise-log-search-and-archive

Automatically exported from code.google.com/p/enterprise-log-search-and-archive
0 stars 0 forks source link

Limit directive not working #139

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1.  Upgrade to r797 or higher
2.  Add a limit directive greater than 1000 to query: "class:snort flash 
limit:4000"

What is the expected output? What do you see instead?
Expected output would be 4000 results if that many exist.
Only getting 1000 results max.

What version of the product are you using? On what operating system?
version >= r797

Please provide any additional information below.
Revision r797 made the following change to elsa/web/lib/API.pm:
35  -   our $Max_limit = 1000;
35  +   our $Max_limit = 10000;

With this change, I cannot get more than 1000 results.  I was able to before 
this.  I just installed r796 and was able to get more than 1000, upgraded to 
r797, and 1000 is max.  I reverted Max_limit to 1000, and I can get more than 
1000 results again.  Not sure what's happening, but that is my experience.   I 
tested with latest r877 with Max_limit revereted to 1000, and limit directive > 
1000 is working again.

Original issue reported on code.google.com by kebut...@gmail.com on 10 May 2013 at 2:18

GoogleCodeExporter commented 8 years ago
Limit directive not working as documented I should say.

Original comment by kebut...@gmail.com on 10 May 2013 at 4:51

GoogleCodeExporter commented 8 years ago
Fixed in 878

Original comment by mchol...@gmail.com on 10 May 2013 at 6:53