Reporting

Data model split row 1M limit

hylam
Contributor

I am calculating the average number of page views per session in a web server log file. I have accelerated the data model. The 1M limit is smaller than expected for a big data map reduce technology. How does it scale up or scale out? I will consider sampling if this doesn't scale. Thx.

sourcetype=access_combined |stats count as cnt by session_id | stats avg(cnt)
(Note: I did not test this search)

alt text

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

A zero usually tells Splunk to not apply any limit.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

A zero usually tells Splunk to not apply any limit.

martin_mueller
SplunkTrust
SplunkTrust

Data models scale with the regular horizontal scaling of Splunk, by adding more indexers.

0 Karma

hylam
Contributor

How does it scale up or scale out?

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...