I've got a long-running search that's spending more time than necessary in command.search.typer. I say more time than necessary because I'm not referencing the eventtypes at all, whether as a field nor as part of my search string. I've tried the
fields - eventtype strategy listed here, but I still see time spent in command.search.typer.
Anything else I can try to temporarily disable eventtypes?
(Splunk version is 4.3.6.)