Getting Data In

In what order do I Rebuild, Update Data Model after Summary Range Change?

NightShark
Path Finder

I have recently realized certain data models of indexes are occupying alot of disk size and have lowered the Summary Range of related Data Model from 3 months to 1 month. Currently in this scenario I have not seen a drop in the Disk Size usage in the Data Model screen, do I need to Rebuild and Update the acceleration?

If so in which order and are there any performance or other risks involved in doing so?

Thanks,

Regards,

Labels (4)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @NightShark,

yes, every change in Data Models' configuration requires a rebuild.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...