Indexed vs search time

[mmccul]

Document when does indexed field extractions help.

• If you search for a key/value pair where the value is not found in other strings (mykey=fancystringvalue): No benefit
• If you search for a value plain as a quoted string without a field ("valuehere"): No benefit
• If you search for a key/value pair where the value is commonly found in multiple keys (mykey=1): Benefit