3 ms·
Very very fast, I can do an all time search on terabytes of data in seconds. But you have to learn to use it, if you don't give it an index and a sourcetype th
by _8j50 4y ago
Very very fast, I can do an all time search on terabytes of data in seconds.
But you have to learn to use it, if you don't give it an index and a sourcetype that will slow it down, and like ES leading wildcards slow things down. The fastest searches are simple terms like a word or an IP.
- chillfox 4y agoInteresting, From the general responses it sounds like we got unlucky with a dud implementation.