|
|
|
|
|
|
by endorphine
707 days ago
|
|
|
Let's say that it powers a "search logs" page that an end user wants to see. And let's say that they want last 1d, 14d, 1m, 6m. So subsecond I would say is a requirement. And no, it doesn't have to be the same system that ingests/indexes the logs. |
|
|
You can easily entertain users to show them that the system is doing something in the background without loosing them and if they are collegues who actually need to search, you don't even need to keep them as they have to use your setup.