Hi All, I need to turn on the search parallelization "Batchmodesearch parallelization" but not sure where I need to configure this setting ? We have distributed Environment with 5 individual F...
...ustomers leveraging batchmodesearch parallelization can see a doubling of speed in returning batchmodesearch results."
What is meant by "batchmode"? An interactive search? A scheduled search? B...
...ou wish to override it.
#
# This file contains possible attributes and values you can use to
# configure inputs, distributed inputs and file system monitoring.
[default]
index = default
_...
Hello,
I tried this
index=s4 *Error* | rex mode=sed field=_raw "s/(\w+\tError\t\d\t[^\t]*\s\d{4}\-\d{2}\-\d{2}\s\d{2}\:\d{2}\:\d{2}\s\([^\s]*\s)(\(\d+\)\)\s\w{3}\-\w{3}\-\d{5})(.*)/\2/g...
...niversal Forwarder, the new hosts and source types are not showing up in my Splunk Search.
I have created a new index and configured that index as well on Splunk app.
I can see the new indexer is g...
...Job Inspector. Batchmodesearch is indicated by the boolean parameter isBatchModeSearch.
http://docs.splunk.com/Documentation/Splunk/6.3.3/Knowledge/Configurebatchmodesearch
...hat parallelIngestionPipelines should be configured on indexers, I am kind of not very sure where the batch_search_max_pipeline settings should be configured.
on Indexers?
on Search Head?
o...
...nvironment with 5 individual Forwarder, 5 individual Indexer, 3 search head cluster and thousands of UF configured.
Based on the above requirement, can I add this stanza to increase the p...