New comment on reddit

In addition to what /u/Kompaan86 said:

• fast mode (or at least smart mode) vs verbose
• as many field=value filters as you can use
  • especially virtal with index=ndx and sourcetype=srctp
  • use Job Inspector to look at an unbounded search where you don't specify sourcetype vs one where you do – it's dramatic!
• clean up old jobs in your job history
• | stats as much as you can
• only the time range(s) you really need – I routinely put earliest=<when> latest=<otherwhen> in my search string instead of relying on the time picker