When we launch Splunk Home or Search page, there is this metadata that runs in real-time eating up our resources available at hand.
|metadata type=sourcetypes | search totalcount>0
I have read other answers here in the forum that say it can be disabled by changing the config at `ui-prefs.conf`.
My question is: What would be any repercussions of performing this tweak - is this search actually being used somewhere else?
Actually, what is the purpose/benefit/importance of this search?
↧