Monthly Index
When enabled, the monthly index feature increases the performance of the searches spanning monthly time ranges.
The monthly index adds a month-based index on top of the existing hourly indexes and enables searches to quickly locate the search terms within a given month.
Note:
- Only the advanced search uses monthly indexing.
- Monthly indexing can be enabled only if the Advanced Search features are enabled. To enable the advanced features and the monthly index feature, contact your administrator.
- To troubleshoot performance issues, you can disable monthly indexes in a query by specifying useMonthlyIndex=false after the OPTIONS keyword. For example:
use system | OPTIONS useMonthlyIndex=false | 'logapp' | group by hours(sys_eventTime)