All Apps and Add-ons

Where and when do we use summariesonly=t with datamodel?

rameshlpatel
Communicator

I am using the Splunk App for Web Analytics where each app searches using data models with summariesonly=t by default. However, it's not working as it is. However, when I remove summariesonly=t from the search, it starts working.

Someone please help me to understand where do we use summariesonly=t with datamodel?

1 Solution

esix_splunk
Splunk Employee
Splunk Employee

When you add the summariesonly=t flag, this tells the data model only to look at existing accelerated data (tsidx.) If you dont have acceleration configured, or it hasnt run fully, then you wont get results.

View solution in original post

esix_splunk
Splunk Employee
Splunk Employee

When you add the summariesonly=t flag, this tells the data model only to look at existing accelerated data (tsidx.) If you dont have acceleration configured, or it hasnt run fully, then you wont get results.

Get Updates on the Splunk Community!

Splunk Smartness with Brandon Sternfield | Episode 3

Hello and welcome to another episode of "Splunk Smartness," the interview series where we explore the power of ...

Monitoring Postgres with OpenTelemetry

Behind every business-critical application, you’ll find databases. These behind-the-scenes stores power ...

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...