Prerequisites
To be successful, students should have a solid understanding of the following:
- How Splunk works
- Creating search queries
- Creating reports and data models
Course Objectives
- Optimizing Search
- Report Acceleration
- Data Model Acceleration
- Using the tstats Command
Course Content
This three-hour module is for power users who want to improve search performance. Topics will cover how search modes affect performance, how to create an efficient basic search, how to accelerate reports and data models, and how to use the tstats command to quickly query data.