<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Alerting when data model acceleration falls behind? in Deployment Architecture</title>
    <link>https://community.splunk.com/t5/Deployment-Architecture/Alerting-when-data-model-acceleration-falls-behind/m-p/762933#M30067</link>
    <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/318345"&gt;@lok_g&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;&lt;P&gt;You can see in the Enterprise Security Audit Data Model dashboard and in the Monitoring Console if there's a fail in the Data model Execution, so youcan take this search and transform it in an alert.&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
    <pubDate>Mon, 17 Aug 2026 07:31:16 GMT</pubDate>
    <dc:creator>gcusello</dc:creator>
    <dc:date>2026-08-17T07:31:16Z</dc:date>
    <item>
      <title>Alerting when data model acceleration falls behind?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Alerting-when-data-model-acceleration-falls-behind/m-p/762923#M30065</link>
      <description>&lt;P class=""&gt;I have an accelerated data model over ~400M events/day. Occasionally a props change invalidates the accelerated range and I don't notice until dashboards go empty.&lt;/P&gt;&lt;P class=""&gt;Is there a way to alert on acceleration completion percentage dropping, rather than checking Settings &amp;gt; Data Models manually? I'd rather not poll a REST endpoint on a cron if there's something built in.&lt;/P&gt;</description>
      <pubDate>Sun, 16 Aug 2026 17:14:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Alerting-when-data-model-acceleration-falls-behind/m-p/762923#M30065</guid>
      <dc:creator>lok_g</dc:creator>
      <dc:date>2026-08-16T17:14:59Z</dc:date>
    </item>
    <item>
      <title>Re: Alerting when data model acceleration falls behind?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Alerting-when-data-model-acceleration-falls-behind/m-p/762933#M30067</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/318345"&gt;@lok_g&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;&lt;P&gt;You can see in the Enterprise Security Audit Data Model dashboard and in the Monitoring Console if there's a fail in the Data model Execution, so youcan take this search and transform it in an alert.&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Mon, 17 Aug 2026 07:31:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Alerting-when-data-model-acceleration-falls-behind/m-p/762933#M30067</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2026-08-17T07:31:16Z</dc:date>
    </item>
    <item>
      <title>Re: Alerting when data model acceleration falls behind?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Alerting-when-data-model-acceleration-falls-behind/m-p/762940#M30068</link>
      <description>&lt;P&gt;You can just make an alert based on&lt;/P&gt;&lt;PRE&gt;| rest /services/admin/summarization/?by_tstats=1&lt;/PRE&gt;</description>
      <pubDate>Mon, 17 Aug 2026 10:09:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Alerting-when-data-model-acceleration-falls-behind/m-p/762940#M30068</guid>
      <dc:creator>PickleRick</dc:creator>
      <dc:date>2026-08-17T10:09:33Z</dc:date>
    </item>
  </channel>
</rss>

