Modes of Searches
1 min readSplunk provides you with 3 different modes of Splunk searches i.e. Fast, Smart & Verbose. Modes of searches can be selected as per your need.
By default, the mode selected is Smart.
- Fast : The Fast mode prioritizes the performance of the search and does not return nonessential field or event data. This means that the search returns what is essential and required.
- Verbose : The Verbose mode returns all of the field and event data it possibly can, even if it means the search takes longer to complete.
- Smart : The default Smart mode switches between the Fast and Verbose modes depending on the type of search that you are running. When you first run a saved search, it runs in the Smart mode.
