A Customer Site Is Experiencing Poor Performance

question 48

Multiple Choice

A customer site is experiencing poor performance. The UI response time is high and searches take a very long time to run. Some operations time out and there are errors in the scheduler logs, indicating too many concurrent searches are being started. 6 total correlation searches are scheduled and they have already been tuned to weed out false positives. Which of the following options is most likely to help performance?

• A) Change the search heads to do local indexing of summary searches.
• B) Add heavy forwarders between the universal forwarders and indexers so inputs can be parsed before indexing.
• C) Increase memory and CPUs on the search head(s) and add additional indexers.
• D) If indexed realtime search is enabled, disable it for the notable index.

---

Definitions:

Retroactive Interference

A memory phenomenon where newer information makes it difficult to recall information that was learned earlier.

Psychological Theorists

Individuals who have developed theories in psychology to explain human behavior, emotions, and thought processes.

Encoding Failure

The inability to create a memory link because information was not attended to or was improperly processed at the time of encoding, leading to the information being forgotten or not stored.

Memory Trace Decay

Memory trace decay involves the gradual fading or weakening of a memory over time when it is not activated or retrieved, leading to forgetting.