parallel reduce

parallel reduce

noun

A search processing method used in distributed search environments to speed up completion times of searches that run over large high-cardinality datasets. When you run a parallel reduce search job, the Splunk platform puts indexers into service as intermediate reducers. These intermediary reducers perform a portion of the processing of a search in parallel with each other. When significant numbers of intermediary reducers are employed, long-running searches over high-cardinality datasets can have their completion times significantly reduced.

To invoke parallel reduce search processing, you need to use the redistribute command in your search.

For more information

In Distributed Search:

• Overview of parallel reduce search processing

In the Search Reference:

• redistribute