All Apps and Add-ons

Suggestion for data model acceleration page summary page of fire brigade application

gjanders
SplunkTrust
SplunkTrust

Currently the query you use is:
| rest /services/data/models | search acceleration=1 | fields title, eai:acl.app | eval app_model_name='eai:acl.app' . " / " . title | eval dm_full_name="DM_" . 'eai:acl.app' . "_" . title

On my Splunk 6.4.0 instance that gets no results, in fact :
| rest /services/data/models

Shows me 12 data models, all within the search application (I am running from the fire brigade application FYI).

However, if you do:
|rest servicesNS/-/-/data/models | search acceleration=1 | fields title, eai:acl.app | eval app_model_name='eai:acl.app' . " / " . title | eval dm_full_name="DM_" . 'eai:acl.app' . "_" . title

I get the expected result, a number of data models which are accelerated, including those provided by the nmon application.

The query:
|rest servicesNS/-/-/data/models

Was provided by Splunk support while during investigating why the REST query would not return all the data models as expected.

Can you update the application please?

Also if you find this useful please vote...

Thanks

0 Karma
1 Solution

sowings
Splunk Employee
Splunk Employee

I've got a small patch coming; I can introduce this in the patch. Thanks for pointing it out. I'll follow up on this post when I've released the update.

View solution in original post

0 Karma

sowings
Splunk Employee
Splunk Employee

I've got a small patch coming; I can introduce this in the patch. Thanks for pointing it out. I'll follow up on this post when I've released the update.

0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...