https://community.splunk.com/t5/Reporting/Report-Acceleration-Time-frames/m-p/415964#M10919 <P>I am trying to make sure that I am doing this correctly, because it doesn't appear to be working.</P> <P>I have a report for last 24 hr of CheckPoint drops. <BR /> i.e. index=CheckPoint action=dropped | timechart count by action</P> <P>I then select Report Acceleration and select 1 month.</P> <P>I then create a dashboard that uses the same Report query with a time span of 30 days.<BR /> i.e. index=CheckPoint action=dropped | timechart count by action</P> <P>Report Acceleration completes.</P> <P>The dashboard should use Report Acceleration to populate, correct?</P> Mon, 15 Apr 2019 13:23:35 GMT john_glasscock 2019-04-15T13:23:35Z https://community.splunk.com/t5/Reporting/Report-Acceleration-Time-frames/m-p/415964#M10919 <P>I am trying to make sure that I am doing this correctly, because it doesn't appear to be working.</P> <P>I have a report for last 24 hr of CheckPoint drops. <BR /> i.e. index=CheckPoint action=dropped | timechart count by action</P> <P>I then select Report Acceleration and select 1 month.</P> <P>I then create a dashboard that uses the same Report query with a time span of 30 days.<BR /> i.e. index=CheckPoint action=dropped | timechart count by action</P> <P>Report Acceleration completes.</P> <P>The dashboard should use Report Acceleration to populate, correct?</P> Mon, 15 Apr 2019 13:23:35 GMT https://community.splunk.com/t5/Reporting/Report-Acceleration-Time-frames/m-p/415964#M10919 john_glasscock 2019-04-15T13:23:35Z