Large scale issue - Optimize run time of the Volume of Data indexed today report

guilhemmarchand / nmon-for-splunk

NMON For Splunk App - convert, index and exploit nmon metrics data for AIX, Solaris and Linux Systems

23 stars 13 forks source link

Closed guilhemmarchand closed 7 years ago

guilhemmarchand commented 7 years ago

At large scale, the report "Volume of Data indexed today report" takes too much time for completeness.

Solution:

Enabling the acceleration of 7 days for this simple report (SPL based) allows a sample 30 sec run time to be changed for a 2 sec run time

Will be included in version 1.9.7