SPLK-5002 · Question #50
What cardinality of data should be used in an indexed field to optimize and speed up searches?
The correct answer is C. Low cardinality, meaning that there is little variance in the data contained in the field. To optimize and speed up searches, indexed fields should have low cardinality, meaning they contain relatively few unique values (e.g., status codes, country codes). Low cardinality fields are more efficient for indexing and searching compared to high cardinality fields with…
Question
What cardinality of data should be used in an indexed field to optimize and speed up searches?
Options
- ASecure cardinality, meaning that only security relevant values are contained in the field.
- BHigh cardinality, meaning that there is a great deal of variance in the data contained in the field.
- CLow cardinality, meaning that there is little variance in the data contained in the field.
- DCompliant cardinality, meaning that only values that contain non-PII/PHI are contained in the field.
How the community answered
(53 responses)- A2% (1)
- B6% (3)
- C81% (43)
- D11% (6)
Explanation
To optimize and speed up searches, indexed fields should have low cardinality, meaning they contain relatively few unique values (e.g., status codes, country codes). Low cardinality fields are more efficient for indexing and searching compared to high cardinality fields with many unique values (like usernames or IP addresses).
Topics
Community Discussion
No community discussion yet for this question.