https://community.splunk.com/t5/Splunk-Enterprise-Security/Pro-s-and-Con-s-on-Data-model-Acceleration-Please-advise-why-or/m-p/565411#M10235 <P>Why should data models all be accelerated? What about the built-in Data Models?</P> Wed, 01 Sep 2021 03:40:37 GMT SamHTexas 2021-09-01T03:40:37Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Pro-s-and-Con-s-on-Data-model-Acceleration-Please-advise-why-or/m-p/565411#M10235 <P>Why should data models all be accelerated? What about the built-in Data Models?</P> Wed, 01 Sep 2021 03:40:37 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Pro-s-and-Con-s-on-Data-model-Acceleration-Please-advise-why-or/m-p/565411#M10235 SamHTexas 2021-09-01T03:40:37Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Pro-s-and-Con-s-on-Data-model-Acceleration-Please-advise-why-or/m-p/565474#M10237 <P>I disagree with the premise that all data models should be accelerated.&nbsp; One should only accelerate the data models one uses.</P><P>Pros of acceleration: faster access to data</P><P>Cons: additional storage; additional scheduled searches</P> Wed, 01 Sep 2021 11:45:33 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Pro-s-and-Con-s-on-Data-model-Acceleration-Please-advise-why-or/m-p/565474#M10237 richgalloway 2021-09-01T11:45:33Z