Monthly Index

When enabled, the monthly index feature increases the performance of the searches spanning monthly time ranges.

The monthly index adds a month-based index on top of the existing hourly indexes and enables searches to quickly locate the search terms within a given month.

Note:
  • Only the advanced search uses monthly indexing.
  • Monthly indexing can be enabled only if the Advanced Search features are enabled. To enable the advanced features and the monthly index feature, contact your administrator.
  • To troubleshoot performance issues, you can disable monthly indexes in a query by specifying useMonthlyIndex=false after the OPTIONS keyword. For example: 
    use system | OPTIONS useMonthlyIndex=false | 'logapp' | group by hours(sys_eventTime)