Deployment Architecture

How to access an accelerated data model on Search Head A from Search Head B with the data stored in an indexer cluster?

miront
Explorer

If I have an accelerated data model (example_datamodel) on Search-Head-A and all of that data is being stored on clustered indexers and I want to run a tstats summariesonly=t from Search-Head-B, is there a way? Currently it would tell me that example_datamodel does not exist. Would I be able to add the data model to Search-Head-B, disable any sort of searching/updating, and then run the search which should reach out to the clustered indexers for the data anyway? I am trying to find a way to ask this question in a better way, but am failing to find the words. It is so clear what I want to do in my head.

1 Solution

muebel
SplunkTrust
SplunkTrust

Hi Miront, Unfortunately data model summaries are keyed towards a particular search head, or search head cluster. In this way you are unable to search one search heads summaries from another, and so you would have to accelerate it on the other search head. This would result in duplicate summaries, but is currently the way that this feature is implemented.

Please let me know if this answers you question 😄

View solution in original post

muebel
SplunkTrust
SplunkTrust

Hi Miront, Unfortunately data model summaries are keyed towards a particular search head, or search head cluster. In this way you are unable to search one search heads summaries from another, and so you would have to accelerate it on the other search head. This would result in duplicate summaries, but is currently the way that this feature is implemented.

Please let me know if this answers you question 😄

View solution in original post

Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!