Please enable JavaScript.

Coggle requires JavaScript to display documents.

DFS (PBS Exclude) :checkered_flag: (Search (Queries (FSH (savedsearches,…

- - - - stats
      - dedup
      - head
      - tail
      - eval
        
        functions
      - fields
      - union
      - join
        
        original join
        
        enhanced join
      - from
      - rename
      - reverse
      - sort
      - rest
      - tstats
      - transaction
      - lookup
      - inputlookup
      - outputlookup
      - selfjoin
      - streamstats
      - eventstats
  - - - number
      - string
      - boolean
  - - - epoch
      - ISO8601
      - time modifier
        
        now
        
        0
        
        -2d@qtr
  - - - info
      - size
    - - job dispatch
      - estimation count
        
        mvexpands
    - - pause
      - resume
      - stop
      - delete
      - send to background
      - share
      - export
  - - - Data Fabric
      - Savedsearches
  - - - savedsearches
      - Inline search
    - - |dfsjob
      - | redistributed dfs=true :red_cross:
- - - - same datacenter
      - cross datacenter
  - - - sh mode
        
        standalone
        
        distribute search
        
        SHC + IDC
        
        Versions
      - fabric mode
        
        distribute search
        
        SHC + IDC
        
        Versions
      - splunk cloud
    - - Spark cluster plus overlapping HDFS cluster
      - Multiple remote HDFS deployments
      - Scaled FSH Cluster plus overlapping HDFS cluster
      - Scaled FSH cluster plus HDFS cluster
- - - - user
      - app
      - system
  - - - crypto
      - sasl
- - - - 1 millions
      - 1~10 billions
      - 5000 events
  - - - warm
      - cold
      - hot
      - frozen
- - - - LDAP
      - AD
      - SSO
    - - ES
      - ITSI
  - - - Linux
      - Windows :red_cross:
    - - OpenJDK
      - OracleJDK :red_cross: