I have two questions about search job execution when search head cluster is used.
In a search head cluster, when I access a specific search head from a browser and search there, is the job execute with the search head that I access?
Or, if there are members that have fewer load, will the member responsible for processing?
Is there a way to check which members performed the schedule search?
I'm sorry I have asked you many times.
→ Is this "realtime" means not "real-time searches" but "all searches" that I log in and execute from the GUI search screen?