Data acceleration lead to indexer down

[wilfredluiz]

Hi Community

My indexer stopped indexing data after I tried accelerating 7+ data models for CIM.

Since I'm working remotely I'm unable to reach the search head GUI (server not reachable).  Please help me fix this issue.

Thanks!

[gcusello]

Hi @wilfredluiz,

About the Data Model Acceleration, you should check the system resources (both on Indexers and Search Heads) using the Splunk Monitor Console and see if there's some problem.

About the question how to reach the SH, you should be able to reach it by SSH to see if Splunk is up and running.

Eventually you can disable some or all the acceleration by conf files, if this is the problem.

Ciao.

Giuseppe