Getting Data In

About datamodel in deploy environment.

yutaka1005
Builder

In my environment, I have two indexers for one Search head and I created a data model in Search head for accelerating searching.

Now, I want to know how is the data model created on two indexers.

Do each have exactly the same data model?
Or each have one data model in a dispersed form?

I am sorry for the rudimentary question, but could anyone tell me about it?

0 Karma
1 Solution

esix_splunk
Splunk Employee
Splunk Employee

When you create the data model on the search head, it distributes the required search components to the indexers. The only time a real "configuration" is placed on the Indexers is when you accelerate your data models. In this case, the accelerated data is stored on the indexers.

Simple answer : You dont need to place data model configurations anywhere but the search head. Unless you want to share and use the data model structures on other SH or IDX.

View solution in original post

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

When you create the data model on the search head, it distributes the required search components to the indexers. The only time a real "configuration" is placed on the Indexers is when you accelerate your data models. In this case, the accelerated data is stored on the indexers.

Simple answer : You dont need to place data model configurations anywhere but the search head. Unless you want to share and use the data model structures on other SH or IDX.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...