topic Re: Can you disable all acceleration in data models? in Reporting

Can you disable all acceleration in data models?

ben_leung — Mon, 28 Sep 2020 19:11:58 GMT

Splunk version 6.0.5 CANNOT set configs in "datamodels.conf" to disable acceleration of data models.

Use case, some apps come with data models already accelerated and cause storage issues after a while.

Tried to set the default stanza with acceleration disabled, did not take effect.

#datamodels.conf
[default]
acceleration = 0

Placed in the following directory path

$SPLUNK_HOME/etc/system/local/datamodels.conf
$SPLUNK_HOME/etc/apps//local/datamodels.conf

Please make a way to disable acceleration without having to specify each data model in the conf.

Tanefo — Mon, 23 Mar 2015 10:12:38 GMT

hi
retry to place your datamodel file here in this path $SPLUNK_HOME/etc/system/local/datamodels.conf

replace your boolean expression 0 by false
like this:

 #datamodels.conf
[default]
acceleration = false

ben_leung — Mon, 23 Mar 2015 21:52:10 GMT

0 or false would not matter.

By default when disabling from the UI, the value turns to 0.

I have already tried placing in etc system.

There seems to be no configuration to actually disable all acceleration for data models, unless told otherwise.

I bring this up because my scenario, the PAN app has 3 data models by default that are accelerated. I want to disable them before installing the app.

the_wolverine — Fri, 17 May 2019 01:52:19 GMT

I know this is late but you could create a custom role that does not have the following capability:
accelerate_datamodel