"I'm completely satisfied with my search speed and there is nothing to improve" said no one, ever. The majority of internet users expect websites to load within two seconds. Why should Splunk dashboards and the underlying searches be any different? No one should be satisfied by searches that take minutes to complete. In this talk, we'll cover all the different strategies to take slow searches and speed them up. This is an updated talk from .conf2017.
Slides PDF link - https://conf.splunk.com/files/2019/slides/FN2188.pdf?podcast=1577146202