All Apps and Add-ons

Is there a search performance difference between using the Splunk Search and Reporting App vs Palo Alto Networks App for Splunk?

LinuxEngi
New Member

Hello,

New to Splunk here, we are using Splunk Enterprise and have multiple apps and add-ons for Splunk.

Is there a difference in search results/performance between using the "Search and Reporting" app or the "Search" within the Palo Alto Networks App for Splunk, as an example, if only from a query perspective.

This is posed under the assumption that both apps have appropriate permissions on the indexes they are searching. I.E. running the following search in the Palo Alto App search as well as Search and Reporting:

index=* sourcetype=pan:threat

EDIT:

Realized my question was originally too vague and did not include enough information.

0 Karma
1 Solution

kmccririe_splun
Splunk Employee
Splunk Employee

The search in the Palo alto app is the same thing as the search for the Search and reporting app. They won't differ in performance at all.

View solution in original post

0 Karma

kmccririe_splun
Splunk Employee
Splunk Employee

The search in the Palo alto app is the same thing as the search for the Search and reporting app. They won't differ in performance at all.

0 Karma

LinuxEngi
New Member

My original question was a broader scope, does the Search and Reporting app act as kind-of a catchall for searching across any app?

0 Karma

kmccririe_splun
Splunk Employee
Splunk Employee

Really any search interface will have that ability to search across all your data. You are limited by which role you are logged into and the roles access to data.

The search and reporting app is just the default app Splunk ships with.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...