Pergunta de entrevista da empresa Splunk

How do you know which part is the most time consuming part in a query? How to fix it?