Reporting

Data Model Acceleration "Size on Disk" is very large. Where is it stored?

the_wolverine
Champion

Splunk UI reports that my DM Acceleration Size on Disk ..... 889878.41MB. (~ 900 GB? Approaching 1 Tb...)

I don't even have that much space on disk so I'm curious. Where is this acceleration stored?

1 Solution

the_wolverine
Champion

It looks like accelerated data_models are stored on the indexers alongside the raw data.

View solution in original post

rjthibod
Champion

On the indexers, It is stored in $SPLUNK_HOME/var/lib/splunk/index_name/datamodel_summary, where "index_name" is the name of the index from which the datamodel is collecting data.

the_wolverine
Champion

It looks like accelerated data_models are stored on the indexers alongside the raw data.

View solution in original post

.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!