<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Cross-app Report Acceleration not working in Reporting</title>
    <link>https://community.splunk.com/t5/Reporting/Cross-app-Report-Acceleration-not-working/m-p/30245#M574</link>
    <description>&lt;P&gt;Damn, that makes sense &lt;span class="lia-unicode-emoji" title=":disappointed_face:"&gt;😞&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;Thanks!&lt;/P&gt;</description>
    <pubDate>Fri, 09 Aug 2013 11:57:13 GMT</pubDate>
    <dc:creator>martin_mueller</dc:creator>
    <dc:date>2013-08-09T11:57:13Z</dc:date>
    <item>
      <title>Cross-app Report Acceleration not working</title>
      <link>https://community.splunk.com/t5/Reporting/Cross-app-Report-Acceleration-not-working/m-p/30243#M572</link>
      <description>&lt;P&gt;I have built an app containing common knowledge objects such as field extractions, lookups, etc. to share between other apps with different role-based visibility.&lt;/P&gt;

&lt;P&gt;Now, the KO app also contains accelerated saved searches, shared globally. Running the search from the KO app uses the report acceleration summary, running the search from a different app such as Search does not use the report acceleration summary.&lt;BR /&gt;
How can I make the report acceleration summary work in all apps?&lt;/P&gt;

&lt;P&gt;To illustrate what I'm seeing, here's a screenshot of the Job Monitor showing the very same search (configured in knowledge with report acceleration fully built, shared globally) run in two different apps with quite different durations.&lt;/P&gt;

&lt;P&gt;&lt;IMG src="http://splunk-base.splunk.com//storage/Unbenannt.png" alt="alt text" /&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 09 Aug 2013 08:53:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Cross-app-Report-Acceleration-not-working/m-p/30243#M572</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2013-08-09T08:53:48Z</dc:date>
    </item>
    <item>
      <title>Re: Cross-app Report Acceleration not working</title>
      <link>https://community.splunk.com/t5/Reporting/Cross-app-Report-Acceleration-not-working/m-p/30244#M573</link>
      <description>&lt;P&gt;Hi martin_mueller&lt;/P&gt;

&lt;P&gt;just recently asked the support team almost the same question and got this answer:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;To answer your question, yes that is to be expected because field extractions often differ by app.  Therefore, you can have 2 identical searches, one in app A and one in app B and they will return different results.  Therefore we currently do not allow sharing of report acceleration across apps.  

To allow for this possibility is being considered for future but it's not been decided on yet.
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;cheers, MuS&lt;/P&gt;</description>
      <pubDate>Fri, 09 Aug 2013 11:45:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Cross-app-Report-Acceleration-not-working/m-p/30244#M573</guid>
      <dc:creator>MuS</dc:creator>
      <dc:date>2013-08-09T11:45:55Z</dc:date>
    </item>
    <item>
      <title>Re: Cross-app Report Acceleration not working</title>
      <link>https://community.splunk.com/t5/Reporting/Cross-app-Report-Acceleration-not-working/m-p/30245#M574</link>
      <description>&lt;P&gt;Damn, that makes sense &lt;span class="lia-unicode-emoji" title=":disappointed_face:"&gt;😞&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;Thanks!&lt;/P&gt;</description>
      <pubDate>Fri, 09 Aug 2013 11:57:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Reporting/Cross-app-Report-Acceleration-not-working/m-p/30245#M574</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2013-08-09T11:57:13Z</dc:date>
    </item>
  </channel>
</rss>

