Datamodel Search Performance

See how well your DM searches are running.

Run this search using the Line Chart visualization:

index=_internal sourcetype=scheduler component=SavedSplunker ACCELERATE NOT skipped run_time=* 
| rex field=savedsearch_id "ACCELERATE_(?:[A-F0-9\-]{36}_)?(?<acceleration>.*?)_ACCELERATE"
| timechart span=5m max(run_time) AS run_time by acceleration
Share This:

Leave A Comment?