Deployment Architecture

Are Data model acceleration searches distributed across Search head cluster ?

veeraras
Engager

Hi,

I have search head cluster with 3 search heads.
I am trying to accelerate a data model.
According to data model acceleration document, it is clear that there will be 3 concurrent searches executed during the acceleration process.
Now my question is, will these three concurrent searches be distributed across the search head cluster or just end up running on the same search head where the acceleration was enabled.
How does the search head cluster captain handle data model acceleration concurrent searches?

Any help appreciated.

Thanks
Veera

0 Karma

diogofgm
SplunkTrust
SplunkTrust

The DMA searches will be handled like other scheduled searches.

------------
Hope I was able to help you. If so, some karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...