Reporting

How often report accelaration check the new data set in HDFS ?

melonman
Motivator

Hi

I am using Hunk and configured report acceleration saved searches. report acceleration automatically checks where there are new data sets that have not been cached.

My Question is how often the report acceleration feature checks new data set in HDFS, and its mechanism.
Is there default value of interval for report acceleration to check the new data sets?
How does the report acceleration keep track of cached/fresh data set?

Appreciated if anyone can point me to the information or readings about this.

Thank you.

1 Solution

Ledion_Bitincka
Splunk Employee
Splunk Employee

It defaults to every 10 minutes, but it can be set on a per saved search basis from the conf file, for more info look at savedsearches.conf. Note that there is a limit to how many report acceleration summary generating searches can run concurrently (defaults to 50% of scheduler's capacity), which means that for busy systems the 10 minute period is only a rough approximation.

auto_summarize.cron_schedule = <cron-string>
* Cron schedule to be used to probe/generate the summaries for this search

View solution in original post

Ledion_Bitincka
Splunk Employee
Splunk Employee

It defaults to every 10 minutes, but it can be set on a per saved search basis from the conf file, for more info look at savedsearches.conf. Note that there is a limit to how many report acceleration summary generating searches can run concurrently (defaults to 50% of scheduler's capacity), which means that for busy systems the 10 minute period is only a rough approximation.

auto_summarize.cron_schedule = <cron-string>
* Cron schedule to be used to probe/generate the summaries for this search
Get Updates on the Splunk Community!

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...