Hi.
We're running a search through a user role we created specifically for querying through the Splunk API. The searches run quite slowly and logging into the user role as well as the sc_admin role, there is a marked difference in job runtimes. How can we fix this difference in searchtime? Is there a specific permission surrounding priority searches we can enable?
