Knowledge Management

Configure Data Model Acceleration to run as a particular user?

wryanthomas
Contributor

A data model acceleration is populating summary with "friendly" values from an automatic lookup (replacing a guid-like value) that I built for "privileged" users ... a lookup that I wish to retain (for dashboard purposes). But I can't figure out how to have acceleration summary not include that "friendly" lookup value. This appears to be because 'nobody' is always the one running acceleration searches. I'd like to be able to specify the user running the acceleration query for this data model to prevent the automatic lookup, but I can't see how to specify user of acceleration searches.

All other acceleration config parameters appear to be in datamodels.conf. But I'm not seeing any option to specify alternative  "owner" / "run_as" account.

Is it not possible to specify owner on the acceleration searches? Or is there another path to get acceleration searches to run as a particular user?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...

Join Us at the Builder Bar at .conf24 – Empowering Innovation and Collaboration

What is the Builder Bar? The Builder Bar is more than just a place; it's a hub of creativity, collaboration, ...

Combine Multiline Logs into a Single Event with SOCK - a Guide for Advanced Users

This article is the continuation of the “Combine multiline logs into a single event with SOCK - a step-by-step ...