Can you disable all acceleration in data models?


Splunk version 6.0.5 CANNOT set configs in "datamodels.conf" to disable acceleration of data models.

Use case, some apps come with data models already accelerated and cause storage issues after a while.

Tried to set the default stanza with acceleration disabled, did not take effect.

acceleration = 0 

Placed in the following directory path


Please make a way to disable acceleration without having to specify each data model in the conf.

Path Finder

retry to place your datamodel file here in this path $SPLUNK_HOME/etc/system/local/datamodels.conf

replace your boolean expression 0 by false
like this:

acceleration = false
0 Karma


0 or false would not matter.

By default when disabling from the UI, the value turns to 0.

I have already tried placing in etc system.

There seems to be no configuration to actually disable all acceleration for data models, unless told otherwise.

I bring this up because my scenario, the PAN app has 3 data models by default that are accelerated. I want to disable them before installing the app.

0 Karma


I know this is late but you could create a custom role that does not have the following capability:

0 Karma
Get Updates on the Splunk Community!

Streamline Data Ingestion With Deployment Server Essentials

REGISTER NOW!Every day the list of sources Admins are responsible for gets bigger and bigger, often making the ...

Remediate Threats Faster and Simplify Investigations With Splunk Enterprise Security ...

REGISTER NOW!Join us for a Tech Talk around our latest release of Splunk Enterprise Security 7.2! We’ll walk ...

Introduction to Splunk AI

WATCH NOWHow are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. ...