I am using the Splunk App for Web Analytics where each app searches using data models with summariesonly=t by default. However, it's not working as it is. However, when I remove summariesonly=t from the search, it starts working.
Someone please help me to understand where do we use summariesonly=t with datamodel?
When you add the summariesonly=t flag, this tells the data model only to look at existing accelerated data (tsidx.) If you dont have acceleration configured, or it hasnt run fully, then you wont get results.
When you add the summariesonly=t flag, this tells the data model only to look at existing accelerated data (tsidx.) If you dont have acceleration configured, or it hasnt run fully, then you wont get results.