Greetings Splunkers,
I recently attended Splunk Fundamentals 3 and the instructor mentioned about a Splunk feature that automatically converts stats commands to tstats in order to try to improve performance. The instructor did not go into details but recommended I post the question to the Splunk Community.
Is there more information about this, i.e. the version this is or will be available in, etc?
Will/can we see the conversion happen in the Job Inspector or noop?
How does/will Splunk select which stats command to convert? Is it only converting based on the metadata and indexed fields in the tsidx file OR will there be other criteria that tstats will convert?
Thanks in advance for any insight or help with this.
