All Apps and Add-ons

Where and when do we use summariesonly=t with datamodel?

rameshlpatel
Communicator

I am using the Splunk App for Web Analytics where each app searches using data models with summariesonly=t by default. However, it's not working as it is. However, when I remove summariesonly=t from the search, it starts working.

Someone please help me to understand where do we use summariesonly=t with datamodel?

1 Solution

esix_splunk
Splunk Employee
Splunk Employee

When you add the summariesonly=t flag, this tells the data model only to look at existing accelerated data (tsidx.) If you dont have acceleration configured, or it hasnt run fully, then you wont get results.

View solution in original post

esix_splunk
Splunk Employee
Splunk Employee

When you add the summariesonly=t flag, this tells the data model only to look at existing accelerated data (tsidx.) If you dont have acceleration configured, or it hasnt run fully, then you wont get results.

Get Updates on the Splunk Community!

Learn Splunk Insider Insights, Do More With Gen AI, & Find 20+ New Use Cases You Can ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...