Set search-time event segmentation in Splunk Web
Splunk Web allows you to set segmentation for search results. While this has nothing to do with index-time segmentation, search-time segmentation in Splunk Web affects browser interaction and can speed up search results.
To set search-result segmentation:
- Perform a search. Look at the results.
- Click Format after the set of events is returned.
- In the Click Selection dropdown box, choose from the available options: full, inner, or outer. The default is "full".
You can configure the meaning of these dropdown options, as described in "Set the segmentation for event data".
Set the segmentation for event data
Use a test index to test your inputs
This documentation applies to the following versions of Splunk® Enterprise: 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.1.0, 9.1.1, 9.0.0