Diagnose and improve one existing functional Splunk search from supplied SPL and runtime evidence. Use when a search, report, dashboard panel, or scheduled search is slow, queued, expensive, resource-intensive, or prematurely finalized and the user needs evidence-backed query tuning, acceleration-fit analysis, workload separation, or a comparable before-and-after plan. Route new-search authoring, functional break/fix, governance, and deployment-wide operations to their owning workflows.
