Hello together,
I would like to benchmark Splunk's indexing performance. Because I would like to do it automatically, I would like to use its CLI commands.
Does this command:
./splunk search 'index=bench | eval time=_time | eval itime=_indextime | eval latency=(itime - time) | stats count, avg(latency) by index'
reflect the time, where Splunk needed to read the data, index it, and make it accessible?
Thank you very much for your answers.
Best regards
↧