Related Answers
Download topic as PDF
Set search-time event segmentation in Splunk Web
Splunk Web allows you to set segmentation for search results. While this has nothing to do with index-time segmentation, search-time segmentation in Splunk Web affects browser interaction and can speed up search results.
To set search-result segmentation:
1. Perform a search. Look at the results.
2. Click Options... above the returned set of events.
3. In the Event Segmentation dropdown box, choose from the available options: full, inner, outer, or raw. The default is "full".
You can configure the meaning of these dropdown options, as described in "Set the segmentation for event data".
|
PREVIOUS Set the segmentation for event data |
NEXT Use a test index to test your inputs |
This documentation applies to the following versions of Splunk® Enterprise: 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14, 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.4.9, 6.4.10, 6.4.11, 6.5.1, 6.5.2, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.6.10, 6.6.11, 6.6.12, 6.5.0, 6.5.10, 6.5.3, 6.5.4
Feedback submitted, thanks!