Problem with search_command.py field limit

remg427 / misp42splunk

A Splunk app to use MISP in background

GNU Lesser General Public License v3.0

109 stars 30 forks source link

Problem with search_command.py field limit #261

Open upfischer opened 5 months ago

upfischer commented 5 months ago

We get the following error when using the misp42 Splunk App: "/splunk/etc/apps/misp42splunk/lib/splunklib/searchcommands/search_command.py", line 291 : field larger than field limit (10485760) ".

Are there Limitations for the 'mispsearch' and other commands in this TA and if yes, is it possible to fix this problem?

remg427 commented 3 months ago

HI, I am not sure from which platform this limitation comes from? do you know if it is from Splunk or from MISP API?