Logger storage groups and speed
So I was thinking about how to speed up logger searches. If I had a SmartConnector and I sent it to two different receivers on the Logger, I would be able to store the events under two different retention policies. Instead of searching the default storage group I could use a 7day storage group.
Would preforming searches on the separate 7day storage group be faster than searching with a "past 7 days" query limit on default storage (with much greater retention policy)?