Hi
Other users are unable to open splunk screens for up to 1 minute while one user is running a large base search?
We have one search head and one indexer.
The base search takes 2 minutes to run off datamodels.
When this search is running other user can't even open splunk to do anything.
Would increasing the number of search head or indexers help?
Any help would be great as i dont want to revert from base search.
Thanks in advance
Robert Lynch
