https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310932#M5713 <P>You could enable report acceleration for your report to avoid re-running over old days again and again.<BR /> You could use the existing license usage data model or a custom one, accelerate that, and build your 30-day reports off that accelerated data model.<BR /> You could run a summary search every day to build the report for yesterday, and run your 30-day reports off that summary index.</P> Sun, 19 Feb 2017 19:25:40 GMT martin_mueller 2017-02-19T19:25:40Z https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310931#M5712 <P>Hi,</P> <P>I need to generate a number of reports about license utilization for different customers, over the past 30 days. Do I need to re-run the past 30 days search every day, or is there a way to run it for one day, and have a history that keeps building? Running it every day for 30 days seems like a waste of resources...</P> Sun, 19 Feb 2017 14:44:30 GMT https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310931#M5712 a212830 2017-02-19T14:44:30Z https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310932#M5713 <P>You could enable report acceleration for your report to avoid re-running over old days again and again.<BR /> You could use the existing license usage data model or a custom one, accelerate that, and build your 30-day reports off that accelerated data model.<BR /> You could run a summary search every day to build the report for yesterday, and run your 30-day reports off that summary index.</P> Sun, 19 Feb 2017 19:25:40 GMT https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310932#M5713 martin_mueller 2017-02-19T19:25:40Z https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310933#M5714 <P>For the first one, how does that work in practice? I want to report on 30 days, but not have my search query the past 30 days every time. </P> Sun, 19 Feb 2017 22:22:24 GMT https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310933#M5714 a212830 2017-02-19T22:22:24Z https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310934#M5715 <P>The first one is the easiest to build - save the report with a time range of 30 days, check the "accelerate" box, select 30 days, save, done. Splunk does the rest underneath.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.5.2/Report/Acceleratereports">http://docs.splunk.com/Documentation/Splunk/6.5.2/Report/Acceleratereports</A></P> Sun, 19 Feb 2017 22:32:15 GMT https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310934#M5715 martin_mueller 2017-02-19T22:32:15Z https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310935#M5716 <P>Do you need to schedule report as well?</P> Mon, 25 Sep 2017 17:50:33 GMT https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310935#M5716 kiril123 2017-09-25T17:50:33Z https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310936#M5717 <P>No, its like a rolling 30 day window.</P> Mon, 26 Feb 2018 16:40:54 GMT https://community.splunk.com/t5/Reporting/Report-scheduling-acceleration-question/m-p/310936#M5717 leonphelps_s 2018-02-26T16:40:54Z