Configure Splunk Index-time Field Extractions with props.conf and transforms.conf
Shift recurring field extraction from search time to ingestion to reduce search CPU, with caveats about permanence and index size.
Loading…
ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Shift recurring field extraction from search time to ingestion to reduce search CPU, with caveats about permanence and index size.
splunk