Hi,
I've got ~15.000 events where FieldA exists (in total there are 20.000.000 events). I want to filter out these events and I'm wondering about the performance of different approaches.
Why i...
...isplay the dashboard. What constitutes a search: a data base search? or does the post search also count?
2) I did some rough counts, If I merge the 5 summary-indexes into one, there will be about 3...
..." only returns about 300 results, but the subsearch is searching across millions of users accounts. If I removed the sub search, the outer search only takes a few seconds to complete.
Does a...
I have a dashboard that has over 30 panels - they all have the same basic search query so I decided to use the new searchoptimization of Splunk 6.2. Here is what I did - I defined a global search a...
...nown IPs from the logdata. However the searches seem to take a long time, and I'm not sure if its due to my non-optimized search or that its just too much logdata.
My goal was to search through the l...
...ranularity of charts)
Therefore, i am looking for the better approach to optimize dashboard performance and reduce number of jobs and their CPU cost.
1. Schedule Saved searches
This was my f...
My environment : splunk stand-alone ver7.1.4
*I found same phenomenon in ver7.1.3
I executed search below by using two lookup tables .(*I attached them to this page.)
| inputlookup t...
...sers BY server_id
I'm thinking about how to optimize the performance of this dashboard.
1. Report Acceleration
Accelerate this base search (the output will be at least >3.000.000 r...
I'm looking for assistance in optimizing a dashboard where we use tstats as a base search. Our Splunk systems have more than enough resources and there hasn't been any signs of degraded performance o...
Hi!
I have a dashboard with 4 panels. I use a base search "baseSearch1" and two post process searches based on my baseSearch1 :
baseSearch1 -> countSearch
baseSearch1 -> t...