- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Based on the search time which is best, stats or transaction?
Ramana246
Explorer
05-05-2023
01:41 AM
based on the search time which is best, stats or transaction.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

gcusello

SplunkTrust
05-05-2023
02:06 AM
Hi @Ramana246,
use stats all the times you can,
in other words, you have to use transaction (that's very slow command) only if you have to use a condition as startswith or endwith.
Ciao.
Giuseppe
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yuanliu

SplunkTrust
05-05-2023
01:48 AM
stats, hands down.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ramana246
Explorer
05-05-2023
01:53 AM
Thanks
