Implementing Splunk 7(Third Edition)
上QQ阅读APP看书,第一时间看更新

Presets

Presets are time ranges that are predefined for you in Splunk Enterprise. You should be aware, though, that if you are searching potentially large amounts of data, the results will return faster if you run the search over a smaller time period (rather than All time (real-time)):