Open NeroCube opened 4 years ago
https://www.slideshare.net/Splunk/splunk-search-optimization
Post process Extract fields Summary Index SPL (e.g. stats to join, streaming command, Reporting Command )
https://www.slideshare.net/Splunk/splunk-search-optimization