A search processing method used in distributed search environments to speed up completion times of searches that run over large high-cardinality datasets. When you run a parallel reduce search job, the Splunk platform puts indexers into service as intermediate reducers. These intermediary reducers perform a portion of the processing of a search in parallel with each other. When significant numbers of intermediary reducers are employed, long-running searches over high-cardinality datasets can have their completion times significantly reduced.
To invoke parallel reduce search processing, you need to use the
redistribute command in your search.
In Distributed Search:
In the Search Reference: