Does Data Model Acceleration ONLY apply to "pivot"... - Splunk Community

Knowledge Management

Does Data Model Acceleration ONLY apply to "pivot"?
If I have a search which starts with "from datamodel: data_model_name.xxx", will it be accelerated as well?

Thanks

Pretty positive the answer is no. I did a search and I can see where the job inspector just interprets it in terms of my original dataset search constraint.

If you open the job inspector, and the search is not running against tsidx files or using tstats, then it is definitely not running against the accelerated data.

Get Updates on the Splunk Community!

Introducing the Splunk Answers Content Calendar

Two parameters are needed for shortenTextAtSpace function: string and maxLen. Ellipsis is optional.

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...