1
Search Tuning Performance And Dashboards
hard
A power user is optimizing a dashboard that uses a base search with post-process searches. The base search returns events with many fields, but only a few fields are used by the post-process searches. Which action will most effectively reduce the amount of data transferred from the base search to the post-process searches?