|
|
|
|
|
by _8j50
1348 days ago
|
|
Very very fast, I can do an all time search on terabytes of data in seconds. But you have to learn to use it, if you don't give it an index and a sourcetype that will slow it down, and like ES leading wildcards slow things down. The fastest searches are simple terms like a word or an IP. |
|
From the general responses it sounds like we got unlucky with a dud implementation.