...e've well seen the recommandation here, and especially : "When you set up the monitoring console in distributed mode, it creates one search group for each server role, identified cluster, or custom g...
In GUI > Search app > search page I used to change the searchmode to verbose which I knew it persists after the sessions. Such as, when I change the mode to "Fast" and log out. Once I l...
I'm writing a Splunk app, and want to make the default searchmode fast (instead of smart), since I'm building a complex query that extracts the parameters of interest myself. I couldn't find how t...
Problem:
search: 1. Search: index=win* EventCode=4624 | userlookup(Account_Name) | table Account_Name name sam eid mail | rename Account_Name as user | search eid!=NONE_FOUND | dedup user n...
...ustomers leveraging batch modesearch parallelization can see a doubling of speed in returning batch modesearch results."
What is meant by "batch mode"? An interactive search? A scheduled search? B...
I'm firing search query via REST api to get notable events, but the search is not returning all fields available in the event , I see It is running in fast mode.
How to change the searchmode w...
What is the expected load time of a dashboard studio page in view mode, with only using saved searches?
In our environment we have a dashboard page with ~140 Choropleth SVG Items, each colored by a...
Hi everyone, I've found in the history similar questions and answer like "Searchmodes are just for the UI". But doesn't it really matter? So if I create and tune the search in the Verbose mode...
I would like to determine the searchmode (Verbose, Fast...) for each user's search.
I am currently using this search from GoSplunk.c0m but I am having difficulty locating the searchmode.
C...
I always use Verbose mode
Sometimes I open splunk and it is set as Fast mode as default, why is splunk switching from verbose to fast mode without my consent? Is this a setting where I can c...