Knowledge Management

splunk data model acceleration??

kedjjang
Explorer

For example, I have accelerated the network_traffic model.

The index name was network.

I know that the method I know is stacked under the datamodel_summary directory under the corresponding network path.

==>>> /opt/splunk/var/lib/splunk/network/datamodel_summary/

However, data does not accumulate or accelerate.

What is the problem????

0 Karma

cmerriman
Super Champion

when you look at your data models, the acceleration is turned on? What is the acceleration status? how many buckets? Size on disk? etc.? have you read this about accelerating data models?
http://docs.splunk.com/Documentation/Splunk/6.5.0/Knowledge/Acceleratedatamodels#Data_model_accelera...

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...