A best practice to maximize indexing performance is to minimize configuration generality.
Configuration generality refers to the use of generic or default settings for data inputs, such as source
type, host, index, and timestamp. Minimizing configuration generality means using specific and
accurate settings for each data input, which can reduce the processing overhead and improve the
indexing throughput. Using automatic source typing, using the Splunk default settings, and not using
pre-trained source types are examples of configuration generality, which can negatively affect the
indexing performance
