When we launch Splunk Home or Search page, there is this metadata which runs in Real-Time eating up our resources available at hand.
|metadata type=sourcetypes | search totalcount>0
I have checked the forum that it can be disabled by changing the config at ui-prefs.conf.
But my question is that what would be the impact/repurcussion of performing this tweak, is this search actually being used somewhere else?
Actually, what is the purpose/benefit/importance of this search?
↧