My verbose mode and fast mode results are different . How to run a scheduled search in verbose mode by default?
added this parameter in the search stanza in savedsearches.conf
display.page.search.mode = verbose
But no effect, it is still running in fast mode.
Splunk Enterprise Version: 9.0.4.1
Hi
maybe it’s more efficient to fix your SPL to give the same result with fast mode?
r. Ismo