From the course: Splunk Core Certified User (SPLK-1001) Cert Prep
Join today to access over 25,300 courses taught by industry experts.
Search modes - Splunk Tutorial
From the course: Splunk Core Certified User (SPLK-1001) Cert Prep
Search modes
Now let's talk a little bit more about search modes in Splunk. So in Splunk you have the fast mode, the smart mode and the verbose mode. Now what is the importance of these search modes? So sometimes when you're running searches in Splunk, you might want to prioritize speed. So if you want searches that are going to complete faster, you might want to use the fast mode. But then when a search completes faster, if you are prioritizing speed, then it's going to compromise on something else. So it's not going to be able to give you all the data that you need. Now, there are cases where you might also want a lot of data, but the speed is not very important. Then in that case, you might want to select a different search mode. So with the fast mode here, this is the one that has the best performance because speed over completeness is what it emphasizes on. So if you want more speed, you want your searches to complete faster. What you can do is to use the fast mode. And in the fast mode, as…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.