Morning world am looking for pointers to the following questions. Apologies am very new to Splunk and Hadoop. Can anyone help to point me into document areas to pull out metadata surrounding performance of search event/rules. Below is just some of the areas we would like to know more about.
1/ Ingestion Process Time
2/ Average Memory
3/ Run time for Rules (Start and End Time)
4/ Rule Concurrency (How many rules running at same time)
5/ Splunk Memory/CPU usage
kind regards
James Rees