Modes of Searches

Splunk provides you with 3 different modes of Splunk searches i.e. Fast, Smart & Verbose. Modes of searches can be selected as per your need.

By default, the mode selected is Smart.

1. Fast : The Fast mode prioritizes the performance of the search and does not return nonessential field or event data. This means that the search returns what is essential and required.
2. Verbose : The Verbose mode returns all of the field and event data it possibly can, even if it means the search takes longer to complete.
3. Smart : The default Smart mode switches between the Fast and Verbose modes depending on the type of search that you are running. When you first run a saved search, it runs in the Smart mode.