Set search-time segmentation in Splunk Web
Splunk Web allows you to set segmentation for search results. This has nothing to do with index-time segmentation. Splunk Web segmentation affects browser interaction and can speed up search results.
To set search-result segmentation:
1. Perform a search. Look at the results.
2. Click Format above the returned set of events.
3. In the Drilldown dropdown box, choose from the available options: Full, Inner, Outer, or None. The default is "Full".
You can configure the meaning of these dropdown options, as described in "Set the segmentation for event data".
Set the segmentation for event data
Overview of data preview
This documentation applies to the following versions of Splunk® Enterprise: 6.0