<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Is this statement on Splunk search types correct? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Is-this-statement-on-Splunk-search-types-correct/m-p/222768#M65514</link>
    <description>&lt;P&gt;I did see this link.. but I am confused with Super-parse and rare search. If I have 10 million lines, what will be the occurrences? &lt;/P&gt;</description>
    <pubDate>Tue, 27 Sep 2016 17:13:42 GMT</pubDate>
    <dc:creator>sreejith2k2</dc:creator>
    <dc:date>2016-09-27T17:13:42Z</dc:date>
    <item>
      <title>Is this statement on Splunk search types correct?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Is-this-statement-on-Splunk-search-types-correct/m-p/222766#M65512</link>
      <description>&lt;P&gt;I have found this entry in one of the blogs (non-Splunk). Do you think this statement is correct?&lt;/P&gt;

&lt;P&gt;The following are search terms we will be generating based on a 10,000,000 line file.&lt;/P&gt;

&lt;P&gt;·      Very Dense Search, 1 out of 100 lines, 100,000 occurrences.&lt;/P&gt;

&lt;P&gt;·      Dense Search, 1 out of 1000 lines, 10,000 occurrences.&lt;/P&gt;

&lt;P&gt;·      Extremely Rare Search, 1 out of 100,000,000 lines &lt;/P&gt;

&lt;P&gt;·      Sparse Search, 1 out of 10,000,000 lines, 1 occurrence.&lt;/P&gt;

&lt;P&gt;·      Rare Search 1 out of 1,000,000 lines, 10 occurrences.&lt;/P&gt;</description>
      <pubDate>Mon, 26 Sep 2016 23:15:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Is-this-statement-on-Splunk-search-types-correct/m-p/222766#M65512</guid>
      <dc:creator>sreejith2k2</dc:creator>
      <dc:date>2016-09-26T23:15:45Z</dc:date>
    </item>
    <item>
      <title>Re: Is this statement on Splunk search types correct?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Is-this-statement-on-Splunk-search-types-correct/m-p/222767#M65513</link>
      <description>&lt;P&gt;Hi sreejith2k2,&lt;/P&gt;

&lt;P&gt;while there are some good sources out there, I would stick to the docs &lt;A href="http://docs.splunk.com/Documentation/Splunk/6.4.3/Capacity/HowsearchtypesaffectSplunkEnterpriseperformance"&gt;http://docs.splunk.com/Documentation/Splunk/6.4.3/Capacity/HowsearchtypesaffectSplunkEnterpriseperformance&lt;/A&gt; in this case.&lt;/P&gt;

&lt;P&gt;Hope this helps ...&lt;/P&gt;

&lt;P&gt;cheers, MuS&lt;/P&gt;</description>
      <pubDate>Tue, 27 Sep 2016 00:53:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Is-this-statement-on-Splunk-search-types-correct/m-p/222767#M65513</guid>
      <dc:creator>MuS</dc:creator>
      <dc:date>2016-09-27T00:53:18Z</dc:date>
    </item>
    <item>
      <title>Re: Is this statement on Splunk search types correct?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Is-this-statement-on-Splunk-search-types-correct/m-p/222768#M65514</link>
      <description>&lt;P&gt;I did see this link.. but I am confused with Super-parse and rare search. If I have 10 million lines, what will be the occurrences? &lt;/P&gt;</description>
      <pubDate>Tue, 27 Sep 2016 17:13:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Is-this-statement-on-Splunk-search-types-correct/m-p/222768#M65514</guid>
      <dc:creator>sreejith2k2</dc:creator>
      <dc:date>2016-09-27T17:13:42Z</dc:date>
    </item>
  </channel>
</rss>

