Hi everyone,
I've found in the history similar questions and answer like "Search modes are just for the UI". But doesn't it really matter? So if I create and tune the search in the Verbose mode how exactly will Splunk run the query? What kind of "search mode"?
I can't find that answer anywhere even in the docu page ( https://docs.splunk.com/Documentation/Splunk/9.0.1/Search/Changethesearchmode )
Thanks a lot for some details.
Hi @dflegl,
usually alerts run in Smart Mode, but you can force (without any advantage!) the Verbose Mode.
Ciao.
Giuseppe
Hi @dflegl,
usually alerts run in Smart Mode, but you can force (without any advantage!) the Verbose Mode.
Ciao.
Giuseppe
Hi @dflegl ,
good for you, see next time!
Ciao and happy splunking
Giuseppe
P.S.: Karma Points are appreciated 😉